The following example will show you how to use TradeManger black list.
1. New a blocking level named “trademanager”
2. Configure the black list
Notice: you should add “aliint” before your account, and save the configuration.
3. Apply the blocking level
4. Check blocking of TradeManager
5. Check real-time block
As you can see in the above example, TradeManager accounts in the black list will not be able to login.
Google is redirecting all http requests to https. Since https traffic is secure,this makes it impossible for web filter to monitor and filter google access via https.
Fortunately, google provides a way to disable ssl search for IT administrators to deploy contents filtering products. For more details, please check: https://support.google.com/websearch/answer/186669?hl=en
In this example, I will guide you to block google images with WFilter. This solution requires a local dns server to redirect google traffic. Only clients using this dns server will be redirected. Or you can manually edit the “hosts” file in client computers.
1.1 To disable ssl search, you need to redirect all google traffic to nosslsearch.google.com. Let’s use nslookup to find the ip address of nosslsearch.google.com first.
Run command: “nslookup nosslsearch.google.com 8.8.8.8”. You can find the IP : “216.239.32.20”.
1.2 Configuration of the DNS server
In DNS server，add two zones：”google.com” and “google.com.hk”(google in your country) . In each zone, add an “A” record to “www” with IP address “216.239.32.20”.
1.3 Client computers shall use this DNS server as the “Preferred DNS Server”.
1.4 Open Google to check.
Before redirecting, it’s https.
Now, it’s http.
In below steps, I will demonstrate you to block google images with WFilter’s website black list.
2.1 Add a “block google images” policy. Check “Website Black/White List” and click “New”.
Add a new “Black List” named “google images”, in “List”, input “www.google.com.hk/imghp*” and “cn.bing.com/images*” .
2.2 Apply the “block google images” policy.
2.3 google images will be blocked.
Bing images will be blocked.
Since most wireless devices obtain IP addresses dynamically, management of wireless devices has become a challenge to network administrators. It’s not easy to identify wireless devices by IP addresses or MAC addresses. However, with WFilter, you can identify wireless devices by users.
When enabled, mobile users need to authenticate themselves to access internet. Both active directly authentication and WFilter local authentication are supported. Then you can check devices and users in WFilter console in a few clicks.
In this example, I will guide you to enable AD account monitoring for wireless devices.
In “Account Monitoring “, choose “Windows Active Directory”, click “Enabled”, add a Domain Controller.
Click “Advanced Settings”, choose “Require web authentication for devices which do not log into the domain”, Save Settings. You also can choose “Block all internet access when web authentication is required”and “Require re-authentication when an user has no internet activity for 30 minute(s)”.
Users will not be able to access internet until they’re authenticated. When user authentication web page will show up when browser is open as shown in below figure.
In WFilter’s “Online Users”, you can get a list of online devices and users.
1. Download “Tor” protocol in “System Settings -> Protocols -> Download Protocols”
2. Add a “block tor” policy.
3. Apply “block tor” policy.
4. Tor can be blocked.
In WFilter 4.1 version,a new feature named “web content pushing” is added. This feature enables you to push a web page to client devices at a time interval. You can define time interval, triggers for pushing and pushing pages.
In this example, I will guide you to use the “web content pushing”in WFilter 4.1.
1.1New a blocking level
Add a “company broadcast” policy in “Policy Settings”->”Blocking Level Settings”. Check “Enable Web Content Pushing” and click “New”.
Add a new “web content pushing” named “broadcast”, in “Triggers”, input “www.baidu.com” which means this web pushing shall be triggered when baidu.com is visited.
In “Content”, you can put anything you want to broadcast. It will be displayed when triggered.
Apply this blocking policy to target ip ranges.
1.2 When an user visits baidu.com, the broadcast message will show up every ten minutes.
From version 1.0.172, WFilter free is able to block dropbox on network. In this guide, I will demonstrate you to block dropbox with WFilter free edition.
New a “block dropbox” policy in “Policy Settings”->”Blocking Level Settings”.
Apply the “block utorrent” policy to client ip ranges in “User-device List”.
Can’t connect to dropbox server and website.
According to our recent performance tests, WFilter 4.1 performance is improved significantly. The new version can handle 5000 monitored clients easily, using a “Intel Celeron E3200@2.4GHZ” CPU and 2G RAM.
The monitored clients number still can be increased if it’s running in a better hardware computer.
From version 4.1, WFilter is able to block bittorrent traffic on network. Various bittorrent clients are supported, including utorrent. In this guide, I will demonstrate you to block utorrent downloading with WFilter 4.1, Web Filter Software.
Please Notice: in pass-by filtering mode, you need to block udp ports 1024-65534 in your router or firewall for complete blocking of utorrent.
Below are the steps to block utorrent in WFilter, if you haven’t deployed WFilter successfully, please check “WFilter Deployment Guide”.
New a “block utorrent” policy in “Policy Settings”->”Blocking Level Settings”.
Apply the “block utorrent” policy to client ip ranges in “User-device List”.
Utorrent download speed will be zero when blocked.
In WFilter’s blocking history logs, you will be able to see blocking events of utorrent .
Usually, a manageable switch or router with “port mirroring” feature is required for correct WFilter deployment. In case you only have a wireless router which does not support “port mirroring”, you can try this solution, which is simple to deployment.
The point is to “configure the WFilter PC as your internet gateway and turn the wireless router into a wireless AP.”
The network topology diagram:
The first step is to make the WFilter PC acting as your internet gateway. The WFilter PC shall have two network adapters, one for internet access( usually connected to an ADSL modem), another one for local subnet(shall be configured as “obtain ip address automatically).
We use Win7 in this example. And you’re supposed to have setup internet connection in one network adapter.
Click “Sharing” in “Properties” of the adapter which is connected to internet in “Control Panel”->“Network and Internet”->“Network Connections”, and choose “Allow other network users to connect through this computer’s internet connection”. (Figure1)
Now, another adapter(“LAN Connection”) will be assigned the ip address 192.168.137.1 (It will be 192.168.0.1 in windows XP).
This 192.168.137.1 is the default gateway for local subnet devices to access internet. To make it work for wireless devices, you also need to modify your wireless router’s settings.
Because the WFilter PC is sharing its internet, we only need the wireless router to act as a wireless AP.
Please leave the WAN interface dis-connected, and connect the “LAN Connection” adapter of the WFilter PC to a LAN interface of your wireless router(Can be every LAN interface, usually connect to LAN1).
Assign ip address “192.168.137.2” to the lan interface. If the WFilter computer is windows XP, the ip address shall be “192.168.0.2”.
Because the WFilter PC is serving DHCP, now you need to turn off the dhcp service of the wireless router to avoid conflicting.
The last step is to configure the “LAN Connection” adapter as the monitoring adapter in “Monitoring Settings” of WFilter. And you’re able to monitor and filter local network users.
DHCP servers are commonly used for automatic ip address assigning of client devices. However, if there are multiple DHCP Servers available in one network unintended, it will lead to IP addresses confusion or conflict.
Using the “DHCP Discover” plugin of WFilter. You can get a list of running dhcp servers on your network by a single click.
In this example, I will guide you to use the “DHCP Discover” plugin of WFilter Free.
Click “Download Plugins” in “System Settings”->”Plugins”. Find the “DHCP Discover plugin” and install it.
Firstly, You should choose an adapter and then “Start Scan”.
When the scan finished, you’ll get a list of running DHCP server(s) and certain informations.
