K-9 filter block

@K-9 filter block
Here’s the problem:
I have a K-9 Web protection filter.
When I try to go on to Creative Cloud.exe or TypeKit
K-9 blocks it because of “http://hammer.behance.net:433” or http://api.behance.net:433.
If these are sites, I could go onto them and allow the sites.
But I can’t actually find such sites to go onto.
Is there another workaround to this issue? I don’t need Behance at this point. Is this a known problem?

Hi,
I don't see any relation between Behance and typekit or creative cloud.
Here is a doc with essential Adobe endpoints to allow on a firewall:
http://www.adobe.com/content/dam/Adobe/en/devnet/creativesuite/pdfs/ServiceAndSiteURL_List .pdf
Regards,

Similar Messages

Which is the correct way to filter/block traffic between vlans?

Hi all. My question is: Which is the correct way to filter/block traffic between vlans?
i have a more than 15 vlans. I want to block traffic between them except 2 vlans.
source vlan 3 deny destination vlan 4
#access-list 100 deny ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255
and the oposite:
#access-list 101 deny ip 192.168.4.0 0.0.0.255 192.168.3.0 0.0.0.255
I have to do this for all VLANs, ono by one. Is that right?
Thanks.

There are a couple of ways to achieve that. I assume that you have a Layer3-Switch. There I would configure one ACL per vlan-interface and allow/deny the traffic as you want. Sadly, the Switches don't support object-groups yet, so you have to use the IP-networks here. Only allow/deny traffic based on networks or hosts. Don't even try to be very granular with permit/denys based on ports. Because the switch-ACLs are not statefull you'll run into problems for the return-traffic if you woulf do that. And the return-traffic of course has to be allowed also.
Another way: with the help of 802.1x you can deploy port-based ACLs for every user. That takes some time for planning, but is one of the most powerful solutions.
For more control you could remove the L3-interface from your L3-switch and move that to your router or firewall. These devices support stateful filtering and you can control your traffic much tighter tehn with ACLs on the switch.
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

IP FILTER blocks USB keyboard

Hi,
for the second time, in a different machine, i observe IP FILTER blocking
the keyboard. I have a Solaris 9 on a SunBlade 100 with USB keyboard
and IPFILTER 4.1.22 with pfil 2.1.12. I load the IPF rules and keep on
working normally. On the next day the machine has a normal network
behaviour and the mouse answers, but the USB keyboard is blocked and
i have to reboot to bring to normal behaviour, despite the same IPF rules
are loaded at boot time. Thus it happens with time (???)
The IPF rules are listed below. Should make a rule for the keyboard?
pass out quick on eri0 proto tcp from any to $dns port = domain flags S/FSRPAU keep state
pass out quick on eri0 proto udp from any to $dns port = domain keep state
pass out quick on eri0 proto tcp from $myip to any port = 80 flags S/FSRPAU keep state
pass out quick on eri0 proto tcp from $myip to any port = 443 flags S/FSRPAU keep state
pass out quick on lo0 all
pass out quick on hme0 all
pass out quick on eri0 proto tcp from any to any port = time flags S/FSRPAU keep state
pass out quick on eri0 proto tcp from any to any port = ftp flags S/FSRPAU keep state
block out log first quick on eri0 all
pass in quick on lo0 all
pass in quick on hme0 all
pass in quick on eri0 proto tcp from any to $myip port = ssh flags S/FSRPAU keep state
pass in quick on eri0 proto icmp from $friend to $myip icmp-type echo keep state
block in log first quick on eri0 all
null

wow, i did not find any lock for this block. But it just happens with IP filter
on, even with pass all rules, when i leave the computer a few hours alone.
I already tested, and if i `ipf -D` (disable) it does not happen.
It is also the second machine (different hardware runing solaris 9) in which
if observe it. I am sure IPF does that, but there is no mesg log.
I'll try harder with ipf logs ...

Is there a an app that will filter/block unwanted sms messages?

Hi i hope i have put this in the right section but this is my first post so be gentle if i haven't !
i recently had a nokia n97 (i know wash my mouth out with soap for saying it !) now the phone was cr*p very slow and the charger went up in smoke after 10 days so it went back and i got an i-phone which i should have done in the first place as it is 100% better!
the only thing that was good for the n97 was there was an app that would filter unwanted sms messages
basically you had a "black list " of phone no's or you set it to only accept from contacts list then the app just filtered the sms messages from anywhere else
i cant find anything even remotly similar for the iphone does anyone know of one?

Well in the US on AT&T you can. AT&T has a website (mymessages.wireless.att.com), here you get a limited ability to block SMS. This feature is not highly publicized for obvious reasons. Contact your carrier and see if they have a similar service, many do, they just to publicize such.

Content Filter block attachment .scr/.cab etc... not working inside archive

Hi,
We have trouble that Content Filter for blocking attachments executable, scr, and cab is not working if .exe, .scr, or.cab are inside 7zip, zip or rar archive.
How deep inside attachment ESA goes, if any?
Antivirus config is set to 5 and some viruses passed like CryptoWall as .scr and .cab.
So, we are blocking that extension but this time they were inside archive.

Hello Juraj,
I apologise for the inconvenience.
Currently if there are viral definitions within the attachment, the AV engine would be the first line of defence, if you for some reason notice some viral attachments bypassing your ESA, please open a TAC case so we can escalate the sample to Sophos for you to capture.
As per content filtering.
The scan depth on how deep it will go into a system is defined in 'scanconfig' in the CLI.
This will show your current recursion depth.
As per .cab and .7z attachments not being properly captured if .scr or .exe are inside it
Currently there are some Enh request to allow the unpacking/decompression of these archive files to capture things inside it, at the moment the request is still undergoing review.
As a temporary measure you can proactively send .7z and .cab files to the quarantine for your administrative review --
The ESA will however be able to seek the executable should it be shrouded inside the .rar/.gzip and .zip archives however.
I hope this helps.
Regards,
Matthew

Ironport Filter blocking pdf pages on Ipad

We have a customer who is using a Cisco Ironport filter. When they attempt to view a pdf webpage (pages created in HTML display fine) using an IPad the page will not display. However, when we assign a static IP that bypasses the filter the pages display correctly. We have tried multiple browsers and the problem does not change. This problem cannot be duplicated on a Mac desktop or a windows computer.

The school network engineer is going to take a look at the logs and see what the message is. I will update as soon as he gives is the information you requested. Thank you for the quick response and pointing us in a direction.
Chris

Filter block driver / struct page *b_pages / B_PAGEIO flag

Hi,
i'm develloping a pseudo block driver wich intercepts all requests made on a underlying device ( a hard drive for example ). I want to have acces to data written to this lower device.
Sometimes everything is OK : the "struct buf *" i got in my "strategy" callback contains a valid b_un ptr and I have the data i want.
But sometimes, even if the request is a "write" one, this field is null. I see in this case the field b_pages ( i have the flag "B_PAGEIO" too ) is not NULL . How can I access the data of such a request ?
Any ideas ? thanks,

I think bp_mapin is the stuff i need...
http://docs.sun.com/app/docs/doc/8053182/6j31lcast?a=view
Note : it would be usefull for novices like me if this function could be in the link list of "man buf" or "man strategy" ...

Vendor F4 Help Filter Blocked Accounts

Hello ppl,
My problem is, one of our clients has several wrong wendor accounts which are blocked but they also have correct duplicates. When F4 help is used prog lists at least two entries with similar values. Is there a way to distinct those two, other than manually modifying vend. masters or making alterations in the program's code ???
Regards,
EK

Dear Erdem,
Acc. to me there is no standard way to stop the appearance of duplicate / blocked parties in F4 Option.
what you cna do in in master changes add some prefix to the name. like *** or "Duplicate" etc. so that if users take F4 option than and try to find the name with first name*, it will not appear in list.
Plus to stop furthur postings you need to block them by XK05, and FK05 to stop any posing in FI module.
NOTE: you can take help of ABAPER to stop display of blocked vendors in F4 List, if donot want to od it manually.
hope this can solve you issue.
assign point if helpful.
Cheers
Ashokkumar

Flagged RAW + Photoshop edit -- filter blocks the PSDs from displaying

LR 2.0, Mac OSX Latest Version
I shot a bunch of RAW images, flagged a portion of them, and have my filter set to display Flagged Only. I Develop the images and occasionally open 1 up in Photoshop for additional processing. I save the PSD, it saves it alongside my RAW, and creates a stack of the RAW image and the PSD file in my Library.
However, I have no way of unstacking the set to see the PSD file along with the RAW in LR, because the PSD is not marked as flagged. My filter setting prevents the stack from unstacking, which makes sense. To see/unstack the PSD alongside the RAW, I have to change my filters to show flagged and unflagged images, which is not ideal because it reintroduces all the images I don't wish to see.
Is there any known work around for this? I like how virtual copies work -- you create a virtual copy and it gets flagged, too.
Maybe there should be a setting we can toggle to choose if our edited PSD file gets tagged with the same Flag as the master RAW file?

LR 2.0, Mac OSX Latest Version
I shot a bunch of RAW images, flagged a portion of them, and have my filter set to display Flagged Only. I Develop the images and occasionally open 1 up in Photoshop for additional processing. I save the PSD, it saves it alongside my RAW, and creates a stack of the RAW image and the PSD file in my Library.
However, I have no way of unstacking the set to see the PSD file along with the RAW in LR, because the PSD is not marked as flagged. My filter setting prevents the stack from unstacking, which makes sense. To see/unstack the PSD alongside the RAW, I have to change my filters to show flagged and unflagged images, which is not ideal because it reintroduces all the images I don't wish to see.
Is there any known work around for this? I like how virtual copies work -- you create a virtual copy and it gets flagged, too.
Maybe there should be a setting we can toggle to choose if our edited PSD file gets tagged with the same Flag as the master RAW file?

Exchange Server Attachment filter blocking copier emails???

Randy1699 wrote:
I had the same issue early on with my copiers. You need to allow the ip addresses of the copiers to send email to the Exchange server. You do this by adding the copier ip addresses to the receive connector of the Exchange server as allowed devices.
Is this solution related to attachments? Because as soon as we disable our rule blocking attachments, everything works again. By adding the IP address, does this basically bypass the attachment rules? Or are we on the same page?
Thanks!!

We recently updated our exchange server to block numerous different types of e-mail attachments. We however allow all the normal word, excel, pdf etc.However when we turned the policy on, it specifically broke the Sharp copier machines that send attachments via e-mail. (Other brands work just fine). All the copiers are set up to send PDF's...which is allowed.Does Sharp Copiers use some obscure behind the scenes file type during transit that I'm not aware of?Any suggestions??Below is the attachment types blocked:ade.adp.app.asp.bas.bat.cer.chm.cmd.com.cpl.crt.csh.der.exe.fxp.gadget.hlp.hta.inf.ins.isp.its.js.jse.ksh.lnk.mad.maf.mag.mam.maq.mar.mas.mat.mau.mav.maw.mda.mdb.mde.mdt.mdw.mdz.msc.msh.msh1.msh2.mshxml.msh1xml.msh2xml.msi.msp.mst.ops.pcd.pif.plg.prf.prg.pst.reg.scf.scr.sct.shb.shs.ps1.ps1xml.ps2.ps2xml.psc1.psc2.tmp.url.vb.vbe...
This topic first appeared in the Spiceworks Community

OSX Lion Mail Server Junk Mail Filter blocks incoming mail from any Yahoo address

I have yet to be able to use OSX Lion Mail Server's Junk Mail Filter. I have several contacts who use (free) Yahoo Mail addresses. Whenever I turn on Junk Mail Filter, even at the Most Cautious setting, any incoming mail from Yahoo.com addresses do not make it into my inbox. I was told last year by an Apple Enterprise Tech Support contact that "..we're still having problems with that Junk Mail Filter, sorry, just leave it off for now.." WTH In the meantime, the good news is I'm not missing any incoming e-mails; but, I'm having to sort through and delete a few hundred spam messages each day.
Suggestions? Thanks in advance

I agree with the points made by Strontium90. If you have any PCs then Apple's mail/contacts/calendar software is a poor choice. Kerio Connect as a mail/contacts/calendar server would not only support Macs but would also do a good job supporting PCs running Outlook.
If you are going to become a pure Apple site, then you could use just the Apple software and this would be cheaper than using Kerio. For 30 users this might be a suitable solution, however even in a pure Apple environment many people prefer Kerio. For example I find Kerio much more pleasent when dealing with email addresses across multiple domains, email aliases, email group addresses, and so on. Kerio also has built-in email archiving, that is keeping a record of all emails. Kerio also provides a web-browser client for accessing email, calendar and contacts. It is worth noting that as standard Mountain Lion Server no longer includes a webmail feature. While I personally find the Kerio webclient rather ugly it does work.
There are some annoyances I have with Kerio, firstly they have always charged a 'maintenance' fee for their software. This provided access to software updates, and in the past also provided access to Kerio technical support. Unfortunately they now only let you make two (2) support cases per year for that cost, and you now have to pay extra for any more cases. Also while they added support for EWS (Exchange Web Service) to allow using Outlook 2011 for Mac as a supported email client, they did a poor job of this so that it does not work properly with any other EWS compatible client. This means it will not work in EWS mode with Apple Mail, nor with Outlook for Windows. While there are other ways to connect these other clients, this seems a foolish move and there have been plenty of requests to fix this.
Apple's Mail client uses EWS to connect to a 'real' MS Exhange server.

FEATURE REQUEST: include the "Received" field(s) in email headers as block and filter option

Why can't I set up a filtering rule to block email based on strings appearing in the "Received" field of the Header?
SPAMMERS spoof the information in all of the fields that Apple allows users to select in the iCloud settings, so setting up filters based on those fields is feckless.
I want to be able to Block any emails that originate from specific subnets that are bad actors in SPAM and PHISHING operations. Most of these are in foreign countries. For example - almost all of the SPAM that I'm currently plagued with is coming from IP address in the 89.39.yyy.xxx subnet. Yes, the spam comes from variants in the yyy and xxx indices, but is enabled by complicit domain hosts at the 89.39 level.
If Apple would simply allow iCloud users to filter based on the "Received" header fields, we could set up a "filter/block" for all emails whose "Received" field contains the string " [89.39. " (for example).
Outlook has created the ability for users to set up blocks against any emails originating from a user-specified range of IP addresses. Why won't Apple give its users the same coveted capability?

How would anyone here know why Apple chooses to do anything?
If you want to tell Apple what you want, do so here: http://www.apple.com/feedback/icloud.html

Values missing in Navigation block - Select filter value

Hi Experts,
I'm using navigation attribute in query. Query is built over multiprovider. Navigation attribute in query is ZCOMPAN01__ZSALES_RG. In multiprovider I use two cubes as sources and from first cube I assigned nav. attribute ZCOMPAN01__ZSALES_RG and from second cube I assigned SCUSTSAL1__ZSALES_RG.
When I click in query on funnel to Select filter value I don't see all values which are displayed in query (I see only values from first cube). But when I write the value directly to filter, it is regulary selected. Also I can right click on value in query and set Select filter value, after that I see in filter block all values (from both cubes).
I tried to change all possible Business Explorer setting of infoobject ZSALES_RG (eg. Only values in infoprovider/ only posted...etc.). I also tried to change setting of navigation attribute (right click on nav. attribute in multiprovider - Provider-Specific Properties), but without success. SID table of infoobject contains all values which I need.
Do you have any hint how to see all used values in Select filter value?
Thanks in advance
David

Hi Murali,
Thank you for the response but we know how to set the value, the option is checked and the Select Filter Value still does not show on the context menu during execution. I think the issue is related to a default user exit variable that we use to pre-select a date but still want to be able to navigate and filter other characteristics during execution. There seems to be something to this combination that BW does not like.
Thanks again,
Rick

How do you block or filter traffic to udp port 192?

We are a company trying to stay an "apple office". We use an airport express for our networking and have recently been trying to become PCI "Payment Card Industry" Compliant for our credit card terminal that uses our wireless network. A company hired by the credit card processing company is running scans on our system and we keep failing because of UDP port 192. The specific message they are sending us is:
"Synopsis : The remote host is a wireless access point. Description : The remote host is an Airport, Airport Extreme or Airport Express wireless access point. It is possible to gather information about the remote base station (such as its connection type or connection time) by sending packets to UDP port 192. An attacker connected to this network may also use this protocol to force the base station to disconnect from the network if it is using PPPoE, thus causing a denial of service for the other users. Solution: Filter incoming traffic to this port and make sure only authorized hosts can connect to the wireless network this base station listens on."
I have tried changing all the settings using the Airport Utility including creating a closed network; un-checking allow setup over WAN, un-checking allow SNMP; using 128 bit encryption. I looked all over apple discussions and the internet and can't find a solution. The testing company told me that I need to find out how to filter traffic to udp port 192 or block the port altogether. Any help or guidance is greatly appreciated as we keep failing these scans.

Hi All. I am having the exact same problem with my PCI payment card industry compliance - where I will now be charged a monthly fee because I cannot alleviate this port 192 problem with my airport extreme base station. They very much consider it a security risk and won't budge. They want me to filter/block incoming traffic on this 192 port, I don't know what to do to satisfy their requirements. I have searched and read all the main discussions but, none actually offer a solution - just folks like us looking for help. I also closed network by un-allowing all options in airport utility. I also de-selected automatic date and time stamp. I would very much appreciate any possible suggestions as prefer to remain a long time loyal mac user but cannot afford the monthly fee to be imposed. There's gotta be a solution. I thought mac was ahead of the game in this (and all) areas. Thanks.

I have Problem in fetching data from CONTROL BLOCK

Sir,
I am facing problem in fetching data from control block.
Asif.

is your control-block a filter-block for the detail-block?
Do you want to see only the detail-data of the user-id you have displayed in the master?

K-9 filter block

Similar Messages

Maybe you are looking for