Forwarding Traffic based on Domain name(Google).

Hello ,
Please let me know if this is possible.
I have a asa5520 firewall with 8.2 version.I have two ISP's coming into my firewall for Internet. Currently I am forwarding all my traffic to one of the ISP. I would like to forward only traffic to Google to the second ISP. The reason I am trying to do this is Google reports my primary IP. The message users get is "
When Google detects that a computer or phone on your network may be sending automated traffic to Google we may show the following message: "Our systems have detected unusual traffic from your computer network." after this message users will have to enter a captcha code.
This is an intermittent issue. I would like to test it by forwarding only google traffic to my second ISP. I cannot forward all the traffic to my secondary IPS the reason is I am having site to site tunnels going on my default primary route and If I do it all my tunnels would go down.
Any help regarding this issue or workaround would be appreciated.
OR if I can actually find an IP/user on my inside network which is generating hight traffic to google which is resulting in entering the captcha code and sometimes opening multiple tabs. or if I can ratelimit to allow fixed number of connections to google.
Thanks.

Hello,
First of all the ASA does not support PBR so thats our first wall.
There are some tweaks that we could do with NAT but that would be based on the destination IP address. In this case you will be trying to do the NAT based on the FQDN which does not work.
You will need to determine all of the IP address of google (I know..I know ) and then configure the NAT policies to tweak the Firewall behavior.
How does this sound to you?
Looking for some Networking Assistance? 
Contact me directly at [email protected]
I will fix your problem ASAP.
Cheers,
Julio Carvajal Segura
http://laguiadelnetworking.com

Similar Messages

  • Domain Names/Google Verification/Help?

    Hopefully a quick one...
    I own http://www.sight2bseen.com domain and I forward it in stealth mode to my .mac account. The problem is I put in a google xml file to help make my sight show up, but it only verifies using the whole site.mac.com/name. It won't verify through the http://www.sight2bseen.com
    Am I the only one seeing this? It's been two weeks, and nothing shows un in Google....
    TIA
    sight2bseen

    try this:
    http://karreth.com/iweb/Google%20No.%201.html
    max

  • Forwarding domain name w/ Mecca Hosting

    Has anyone used Mecca Hosting? I have my domain name with them, but I can't figure out how to forward my .Mac site to my domain name (or the other way around, I'm not sure). I'm very new to this, so any help is appreciated!

    I e-mailed them my URL and asked them how they can forward it to my domain name, and here's what they said:
    "This is something that is typically done as a temporary measure. A forward would mean that your site would have to rely on 2 hosting services in order to function correctly. In addition, the search engines do not follow these forwards and would not find your website. We can setup a forward for you, but it is not recommended if you wish to use your own domain. "
    And then again, this:
    "We're not saying that we cannot do it; what we're saying that what you wish to do is not advisable. Your visitors would first be directed to your web server with us and would request to download a web page; our server would them provide them with a web page that tells them to go to another site; the visitor's web browser would then connect to your website on your .Mac account.
    As you can imagine, not only is this very slow, but it is also not as reliable. If one of the 2 providers has a problem, your site will not be displayed; so, you're always dependent on both providers to have a functional website.
    Finally, the search engines ignore these types of forwards, so the website would never be found by search engines.
    In any case, if you really wish to do this, we can go ahead and do it for you. You would not need the web hosting services that you have purchased, as they would not be used to do a URL forward. "
    Any thoughts, those of you who understand all this? Thanks in advance for your time.

  • Reverse proxy to applications on a server by just domain names possible?

    Hi All
    I am looking for a solution to set up a single server, that hosts four J2EE web applications running on a Glassfish application server with just only one IP address.
    When a user wants to use an application, he/she can just type URL without specifing port and path, and the corresponding web application will be displayed accordingly as shown below
    http://sub1.domain1.com -- > webapp1 at port 9100
    https://sub2.domain1.com -- > webapp2 at port 9200
    http://sub1.domain2.com -- > webapp3 at port 9300
    https://sub2.domain2.com -- > webapp4 at port 9400
    I am wandering whether I could use reverse proxy of Sun Java System Web Server 7 to route the traffic from the domain names to their own application on Glassfish as shown above? I tried by creating two HTTP listeners to listen at port 80, and 443 respectively, but I could not access different applications based on domain names without specifying specifix path or port.
    Is there any recommended resources or example of the mapping, or any other suggested solution?

    Thank you for your reply nsegura. I created 4 different virtual servers as you suggested and it worked :)
    However, I have a problem in reverse proxy base on path.
    The scenario is below
    I have an J2EE application that needs to be deployed in three different environment (production, training, testing). It
    is the same application for three environments, so I want them to have the same context-root. I want to use Sun Web Server 7.0 to reverse proxy to the application in each environment based on path, not URL redirect. Example of URL are shown below
    https://sub.domain3.com/app -- > http://localhost:9500 (with context-root /app)
    https://sub.domain3.com/training/app -- > http://localhost:9600 (with context-root /app)
    https://sub.domain3.com/testing/app -- > http://localhost:9700 (with context-root /app)
    So far, it works if I set context-root of the application in each environment differently
    https://sub.domain3.com/app -- > http://localhost:9500 (with context-root /app)
    https://sub.domain3.com/training/app -- > http://localhost:9600 (with context-root /training/app)
    https://sub.domain3.com/testing/app -- > http://localhost:9700 (with context-root /testing/app)
    I am wandering whether there is a solution with Sun Web Server 7 that I can use to achieve reverse proxy of the same application in different environments without having to modifying context-root for each environment and use URL redirect?
    I was thinking about using rewriting path with reverse proxy, but I did not see this function under reverse proxy tab.
    Any ideas?

  • One Arm config Domain Name Content rule

    Hi Guys
    How does domain name content rule works in one arm config.
    What do we put in source groups as VIP address.
    Does it need host headers in WebServer as a requirement.
    How does the client request gets completed.
    Any help much appriciated..

    Thanks for your reply Jim,
    This is what I am trying to do in a One arm config topology
    ( As the CSS guide ( cntntgd.pdf ) says under Configuring a Domain Name content rule)
    The CSS allows you to use a domain name in place of, or in conjunction with, a
    VIP address in a content rule. Using a domain name in a content rule enables you
    to:
    Enable service provisioning to be independent of IP-to-domain namemappings
    Provision cache bandwidth as needed based on domain names
    So I am trying to create a content rule with a domain name instead of VIP address. For ex.
    content domainRule3
    protocol tcp
    port 80
    url "//domain.com/*"
    add service Serv1
    active
    group servers
    add destination service Serv1
    VIP address  ???????? ( what shd we put in here )
    In this case what do we put as VIP address in source groups and how does the traffic flows from Client to actual Server in One arm topology. I am trying this topology where we have multiple sites configured with the same IP address with host headers
    My assumption is that I shd configure DNS servers with VIP address for domain.com and use that as VIP address in source group. But how does the actual traffic flows from client to servers
    Many thanks.

  • Looking for the most econmical way of tying domain name to mobileme iweb

    Hi all, I currently have a few sites that are hosted on mobileme, and I used the DynDNS services to 1) register a domain name (15$) and 2) create a webhop (CNAME) from the domain to the mobileme site (30$). So that's 45$ per year per site. Is there a more economical way of doing the same thing (without running my own server)? I have a handful of brochure sites to post, and I am looking to cut costs. Thx!!!
    coocoo

    No. Look at GoDaddy and see and I think that you will find that what OT has said is correct.
    If you purchase a domain name from them, depending on what ending it is - .com, .co.uk, .net etc, then you just pay for the cost of the registration for one year or two years, which does work out at $7.95 per YEAR depending on the domain name you get and this will be excluding any hosting or e-mail packages. E-mail does cost extra though.
    If you just register your domain name, then you can use CNAME forwarding or web forwarding at no extra cost. So none of this adding $29 for the privilege of using CNAME forwarding - GoDaddy does not do this and you get it when you register your domain name.
    Once you have the domain name registered, all you do is set up a new CNAME and point the 'www' part of your domain to web.me.com which is your MobileMe host and it will be forwarded to your site.
    I use GoDaddy myself and have no problems whatsoever.
    If you have one MobileMe account, then you have the option of entering a domain name into the Personal Domain Name settings - you can do this once for every MobileMe account and can then use CNAME forwarding at your domain registrar to forward your domain name to your MobileMe account.
    However, you can still publish as many sites as you like to MobileMe, but your url will be http://web.me.com/username/sitename, unless you then use masked or unmasked web forwarding to link your domain name to it if you wish.

  • Personal Domain name, CName & netbenefit - losing hope

    True I'm new to this, and before you ask I have followed the routine in the mobileme instructions.
    I've built a couple of Pages which I've 'published' through Iweb to my mobileme account, I had already brought my self a domain name from Netbenefit, and since registered this with mobileme.
    so mobile me lists me as @www.parsleyswarren.org
    Cname on Netbenefit is:
    Host = web.me.com.
    Goes to = web.me.com.
    the settings send me to a generic Netbenefit page.
    My partner has a website where she uses web forwarding instead of the Cname. It works, but when I use webforwarding I get a page from my service provider that says that web.me.com can not be found.
    Any clues ? a solution would be nice (Apple have told me to start again - and again, Whilst Netbenifit have been very quiet). I'm sure it's simple but a week of this is not letting me see this with any clarity.

    Okay, firstly, if you registered your domain name through Netbenefit, then Netbenefit is your domain name registrar. MobileMe has nothing to do with this and has not registered your domain name - you just have it set up in the personal domain name settings in your MobileMe account and that is all. MobileMe is just the host for your website.
    So to set up the CNAME forwarding, your domain name itself which is your alias needs to be forwarded to web.me.com which is your host.
    Under the DNS settings it should be something like www, CNAME, web.me.com and @, CNAME, web.me.com. The www is your sub domain which you are forwarding with @ representing your domain name itself, so you would have to set up a new CNAME for both.
    Don't use web forwarding and CNAME at the same time, you need to use either one or the other.
    If you want to use web forwarding, then you need to go to the web forwarding section of your domain name provider and forward your domain name either masked or unmasked to web.me.com/username/sitename. You need to use more here than just the web.me.com which is only used for CNAME forwarding.

  • IWeb transfer to another domain name?

    I recently purchased a .com name..........from another server.
    I would like to transfer my iWeb page to this server but am really getting confused.  Is there a simple tutorial or way to do this?  I have printed out the tutorial from iWeb and lso from the server, but when it comes down to CNAME, MX Record, A Record, NS Record..........help?
    Thank you.

    If you have published your site to MobileMe, then you DO NOT need to use ftp in any way shape or form.  FTP is only needed if you are uploading your site directly to a hosting account, which you have now said that you do not have, just the domain name.
    Also, you ARE NOT trying to forward MobileMe to your domain name - it is the other way around - what you will do if forward your domain name to MobileMe where you site is published.
    1.  Log in to your MobileMe account under System Preferences and go to where is has Personal Domain on the left hand side and click on this and then where it has enable your domain name, simply enter your domain name here and it will then tell you to go to your domain name registrar and set up CNAME forwarding.
    2.  Go to where you domain name is (your domain name registrar) and log into your account there and then go to the DNS settings and set up CNAME forwarding.
    If you have A records, then you need to delete these and set up 2 new CNAME's, one for www and one for @. The www represents your sub domain, which is http://www.domain.com and then the @ represents your domain name itself which is http://domain.com.
    Set up CNAME forwarding for both these so it should look something like this:
    www CNAME web.me.com
    @ CNAME web.me.com
    This is all you need do and your site should then work.
    You might have got the correct help here faster if you had stated from the start that you were actually publishing your site to MobileMe.
    Also remember, that MobileMe will no longer be here next year, so you will need to get a hosting account from another company, preferably the same company that your domain name is registered with.

  • Can I use several domain names through mobile me ??

    Hi, I have just purchased ilife 09 and would now like to add a couple of additional websites that I have purchased alongside my main one www.empressrockband.co.uk
    I am fairly sure I should be able to do this but I just can't seem to be able to find anything to show me what to do. Everything I look at seems to show how to add the first domain name but not subsequent ones.
    Can anyone please assist ??
    Many thanks, Tony

    No, this is not what they are saying.
    What they are telling you to do is use the CNAME forwarding method for all of your domains, which will not work.
    What you need to do is is log in as they have told you to do and then alter the A settings to create a new CNAME and then forward the www and @ (which they have said) - this is your domain name, which is the alias and forward it to web.me.com - this is forwarded to the Apple server which will point specifically to your site as it is published to MobileMe.
    I take it that you only have one MobileMe account? If you do, then you can only re-direct one domain name using the CNAME/personal domain name option ONCE for every MobileMe account. If you have more than one domain name that you want to re-direct to a MobileMe published site, then you need to use either masked or unmasked web forwarding for the others.
    So ensure that the site that you want linked to your first domain name is published first and then link it using the CNAME method, as your domain registrar has explained to you - you also need to ensure that this same domain name is entered into your MobileMe account too and this will then forward to your first site.
    For your other sites however, you cannot use CNAME, but you need to go to web forwarding and forward your other two domain names or however many others you have to web.me.com/username/sitename and this is how you forward your domain name specifically to your site, by entering the forward as web.me.com/username/sitename. With the CNAME it is only ever web.me.com because your domain name will then link to your first published site - the web forwarding is specific to the site if you have already used the CNAME.
    If you do not know where to find the ordinary web forwarding section of your domain registrar, e-mail them and ask them or ask them to do it for you by telling them which domain names you want linked to which sites and asking them to enable the masking or not and then get them to forward to web.me.com/username/sitename.
    Your only other option, if you want to use CNAME forwarding for all of your domain names is to upgrade your one MobileMe account to a Family Pack, where you get on main account and 4 sub-accounts, all of which you can use CNAME forwarding for.
    Remember - you can only use CNAME forwarding ONCE for every MobileMe account - for other domains you then need to use either masked or unmasked web forwarding.

  • Domain name setup with iWeb 09, MobileMe & Google Apps.

    I purchased a domain (http://tinyurl.com/5v3m3bs) via google, I am hosting the site on my MobileMe (http://tinyurl.com/5vt9qr8) space & am using iWeb09 to edit the website but for the life of me I cannot mask forward using Google Apps from my domain to my MobileMe site.  I have read several articles related to this and seems very confusing.
    Can someone please guide me step-by-step to achieve this?
    Regards

    To set up web forwarding with masking, all you need do is log into your account at your domain name registrar's and then go to the web forwarding section.  Once in web forwarding enable masking and then forward your domain name to web.me.com/username/sitename and that is all you need do. 
    Do remember though that if you have already entered your domain name into your MobileMe account under the personal domain name settings and have set up CNAME forwarding, then you cannot have masked web forwarding as well.
    You need to do one or the other, but NOT both.  Decide what you want and what is more important to you and set this up - if you want masking then just follow the steps above and mask and forward your domain name to web.me.com/username/sitename - you need to be more specific with this.

  • With MobileMe Closed: How to forward iweb "web.me..." address to new FTP site and custom domain name?

    I had a mobile me "web.me.com..." domain name and know I need to upload to a new FTP site with a new domain.  I know how to do that but am wondering...
    Is there a way to forward my old web.me address to the new domain?  I'll probably be using GoDaddy's or 1&1 domain hosting. 
    There are many people who have my old web.me address and I won't be able to tell them the new address.  I don't want them to go away if they see the "mobile me closed" page and don't know where my new site is at.  I just want it to automatically forward.
    thanks

    Its too late to do that as the forward would need to be on the Apple server and its closed now.
    The best you can do is to sign up for hosting and get a domain name...
    http://www.iwebformusicians.com/iWeb/Website-Hosting.html
    Republish your site from iWeb to the new server...
    http://www.iwebformusicians.com/iWeb/Publish-Website.html
    ... and then follow the SEO steps on this page to get your site found by the search engines...
    http://www.iwebformusicians.com/Search-Engine-Optimization/SEO.html

  • Help:Domain name forwarding to .mac URL

    Experts - newbie here - used iweb and built my site. Forwarded my domain name to the .mac URL and everytime I try to access the domain name I get a .mac screen that says my .mac iweb site does not exist. Seemed all rather simple with point and click so now what? Thanks

    everytime I try to access the domain name I get a
    .mac screen that says my .mac iweb site does not
    exist.
    Most likely you made an error in the url. If you would provide the two urls someone could probably help you fix it, otherwise it's pretty impossible.

  • Still having problems forwarding a domain name to my iWeb site

    I'm still having some issues linking another domain name I own to my existing iWeb site. I forwarded the other domain through my GoDaddy account, but when I try it with www in front of the forwarding name, it directs me to my MobileMe home page. Without typing in the www, the forwarding works just fine.
    I must be doing something wrong, but not sure where to adjust things.
    Thanks,
    Steve Pressman

    Steve,
    It sounds like your CNAME may not be set up properly. You'll want to make sure your CNAME www is forwarding to @ which will be the host where the domain is forwarding currently without the www. Here is a link with some instructions (see the section on "Adding or Editing CNAME Records": http://x.co/RBCW
    ^Cj

  • Published domain name in Google

    When searching for our site in Google, it appears as the word 'Home' with our domain name on the second line, many people have simply missed it.
    How do we change this so the domain name is what appears first?

    Its difficult to comment on this without knowing what you have done so far with regard to SEO.
    http://www.iwebformusicians.com/SearchEngines/SEO.html

  • HELP: is it possible to have my own domain name forward to a .mac/iwebblog?

    Just got a macbook pro last week. brand new to this/have no idea what i'm doing. want to get my own domain name. is it possible to buy a domain name ie
    'Testing123.Com' and have it so that when i publish my blog on my .mac/iweb account, the domain name forwards/links to the .mac blog?
    in other words, the .mac/iweb blog address is too long/convoluted...i want something catchier. so is it possible? please advise...would be eternally grateful. thanks so much,
    Emily

    Emily:
    Yes, you can purchase a domain name and have it forwarded to your iWeb produced site. You'll need to buy the name first. GoDaddy.com seems to be a very popular site to purchase domain names.
    Do you Twango?

Maybe you are looking for