Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
2648 Views 1 Reply Latest reply: Jan 23, 2013 3:15 PM by Jon Scholten RSS
willfsouza Newcomer 2 posts since
Apr 9, 2010
Currently Being Moderated

Jan 23, 2013 1:25 PM

How to block an specific group in the groups.google.com

Hi!

 

How to block an specific group in the groups.google.com

 

I have a McAfee Weg Gateway 7.2.0.5(14254)

 

I need to block an specif group in the groups.google.com(here's the url: https://groups.google.com/forum/#!forum/videossomente) i already  tryed to do some rules, but i had not succesfully.

 

I already tried to create rules using URL.Host, Header.Get(String), and extended list, applying the URL https://groups.google.com/forum/#!forum/videossomente with Pornography Category.

 

To this configuration, I enable the Troubleshooting Rule, but the archive logs(Rule Tracing) show that access isn't match with the rules up.

 

Anyone have any idea how to block this group?(https://groups.google.com/forum/#!forum/videossomente)

 

Thanks!

 

William Souza.

ImgRule.PNG

Access.log to the URL https://groups.google.com/forum/#!forum/videossomente

 

 

[23/Jan/2013:19:15:05 +0000] "T_PSN" 10.250.0.155 200 "CONNECT community.mcafee.com:443 HTTP/1.1" "Technical/Business Forums" "Minimal Risk" "" 9297 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:06 +0000] "T_PSN" 10.250.0.155 200 "CONNECT community.mcafee.com:443 HTTP/1.1" "Technical/Business Forums" "Minimal Risk" "" 149945 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:22 +0000] "" 10.250.0.155 407 "CONNECT apis.google.com:443 HTTP/1.1" "" "-" "" 2115 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "T_PSN" 10.250.0.155 200 "CONNECT lh4.googleusercontent.com:443 HTTP/1.1" "Content Server" "Unverified" "" 3056 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "T_PSN" 10.250.0.155 200 "CONNECT groups.google.com:443 HTTP/1.1" "Personal Pages, Forum/Bulletin Boards" "Minimal Risk" "" 1866383 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "T_PSN" 10.250.0.155 200 "CONNECT mail.google.com:443 HTTP/1.1" "Web Mail" "Minimal Risk" "" 122291 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "T_PSN" 10.250.0.155 200 "CONNECT plus.google.com:443 HTTP/1.1" "Social Networking" "Minimal Risk" "" 16264 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "T_PSN" 10.250.0.155 200 "CONNECT plusone.google.com:443 HTTP/1.1" "Internet Services" "Minimal Risk" "" 28167 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "T_PSN" 10.250.0.155 200 "CONNECT ssl.google-analytics.com:443 HTTP/1.1" "Internet Services" "Minimal Risk" "" 31706 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "T_PSN" 10.250.0.155 200 "CONNECT ssl.gstatic.com:443 HTTP/1.1" "Content Server, Internet Services" "Minimal Risk" "" 28232 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "T_PSN" 10.250.0.155 200 "CONNECT www.google.com:443 HTTP/1.1" "Search Engines" "Minimal Risk" "" 5554 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "T_PSN" 10.250.0.155 200 "CONNECT community.mcafee.com:443 HTTP/1.1" "Technical/Business Forums" "Minimal Risk" "" 235771 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "" 10.250.0.155 407 "CONNECT www.google.com:443 HTTP/1.1" "" "-" "" 2114 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "" 10.250.0.155 407 "CONNECT ssl.gstatic.com:443 HTTP/1.1" "" "-" "" 2115 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:32 +0000] "" 10.250.0.155 407 "CONNECT lh4.googleusercontent.com:443 HTTP/1.1" "" "-" "" 2125 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:33 +0000] "" 10.250.0.155 407 "CONNECT plus.google.com:443 HTTP/1.1" "" "-" "" 2115 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:36 +0000] "" 10.250.0.155 407 "CONNECT community.mcafee.com:443 HTTP/1.1" "" "-" "" 2120 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:15:39 +0000] "" 10.250.0.155 407 "CONNECT talk.google.com:5222 HTTP/1.1" "" "-" "" 2120 "" "" "0"

[23/Jan/2013:19:15:39 +0000] "" 10.250.0.155 407 "CONNECT talk.google.com:443 HTTP/1.1" "" "-" "" 2115 "" "" "0"

[23/Jan/2013:19:15:39 +0000] "" 10.250.0.155 407 "CONNECT talkx.l.google.com:5222 HTTP/1.1" "" "-" "" 2123 "" "" "0"

[23/Jan/2013:19:15:39 +0000] "" 10.250.0.155 407 "CONNECT talkx.l.google.com:443 HTTP/1.1" "" "-" "" 2118 "" "" "0"

[23/Jan/2013:19:15:51 +0000] "" 10.250.0.155 407 "CONNECT talk.google.com:5222 HTTP/1.1" "" "-" "" 2120 "" "" "0"

[23/Jan/2013:19:15:51 +0000] "" 10.250.0.155 407 "CONNECT talk.google.com:443 HTTP/1.1" "" "-" "" 2115 "" "" "0"

[23/Jan/2013:19:15:51 +0000] "" 10.250.0.155 407 "CONNECT talkx.l.google.com:5222 HTTP/1.1" "" "-" "" 2123 "" "" "0"

[23/Jan/2013:19:15:51 +0000] "" 10.250.0.155 407 "CONNECT talkx.l.google.com:443 HTTP/1.1" "" "-" "" 2118 "" "" "0"

[23/Jan/2013:19:16:15 +0000] "" 10.250.0.155 407 "CONNECT talk.google.com:5222 HTTP/1.1" "" "-" "" 2120 "" "" "0"

[23/Jan/2013:19:16:15 +0000] "" 10.250.0.155 407 "CONNECT talk.google.com:443 HTTP/1.1" "" "-" "" 2115 "" "" "0"

[23/Jan/2013:19:16:15 +0000] "" 10.250.0.155 407 "CONNECT talkx.l.google.com:5222 HTTP/1.1" "" "-" "" 2123 "" "" "0"

[23/Jan/2013:19:16:15 +0000] "" 10.250.0.155 407 "CONNECT talkx.l.google.com:443 HTTP/1.1" "" "-" "" 2118 "" "" "0"

[23/Jan/2013:19:17:03 +0000] "" 10.250.0.155 407 "CONNECT talk.google.com:5222 HTTP/1.1" "" "-" "" 2120 "" "" "0"

[23/Jan/2013:19:17:03 +0000] "" 10.250.0.155 407 "CONNECT talk.google.com:443 HTTP/1.1" "" "-" "" 2115 "" "" "0"

[23/Jan/2013:19:17:03 +0000] "" 10.250.0.155 407 "CONNECT talkx.l.google.com:5222 HTTP/1.1" "" "-" "" 2123 "" "" "0"

[23/Jan/2013:19:17:03 +0000] "" 10.250.0.155 407 "CONNECT talkx.l.google.com:443 HTTP/1.1" "" "-" "" 2118 "" "" "0"

[23/Jan/2013:19:17:33 +0000] "T_PSN" 10.250.0.155 200 "CONNECT www.google.com:443 HTTP/1.1" "Search Engines" "Minimal Risk" "" 531 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:17:34 +0000] "T_PSN" 10.250.0.155 200 "CONNECT ssl.gstatic.com:443 HTTP/1.1" "Content Server, Internet Services" "Minimal Risk" "" 12711 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:17:34 +0000] "T_PSN" 10.250.0.155 200 "CONNECT lh4.googleusercontent.com:443 HTTP/1.1" "Content Server" "Unverified" "" 1746 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

[23/Jan/2013:19:17:38 +0000] "T_PSN" 10.250.0.155 200 "CONNECT plus.google.com:443 HTTP/1.1" "Social Networking" "Minimal Risk" "" 8472 "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17" "" "0"

 

Thanks!

 

Message was edited by: willfsouza on 1/23/13 5:25:44 PM BRST
Attachments:

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points