Author Archives: WFilter

How to block google talk in gmail with WFilter?

Though official Google Talk protocol is XMPP, it is more
complicated and flexible than XMPP. Google Talk (GTalk) provides several ways for you to access your gtalk account, including:

  • 1). Official  “Google Talk” client.
  • 2). Gmail chat in google mail account.
  • 3). Google Talk Gadget — a web version of Gtalk.

This makes it complicated for you to block usage of google talk on company network. This tutorial will guide you to block google talk, gmail chat and google talk gadget using WFilter.

WFilter identifies Google talk connections by signature matching. Blocking google talk is simple in WFilter.

The below examples demonstrates blocking of google talk and gmail chat.

1. Blocking of jabber, gmail chat and gadget

Set a blocking policy in WFilter to block jabber and google talk:

2. Blocked Google talk:


3. Blocked gadget


4. Blocked gmail chat

How to block MSN online game with WFilter?

Do you notice that your staffs are playing MSN online games during working time? Do you know how to stop them playing games? Here we are talking about how to block MSN games.


 


This tutorial will guide you to block MSN online game with WFilter.


 


1. Open WFilter, choose ‘System Settings—>Customize Protocols’,set ‘Protocol Name,Protocol Desc, Protocol Type, Show it in Blocking Rule’ as the picture, then click ‘New Pattern’.



2. Input the following words into the textbox. Then click ‘Save Settings’.


Name:       MSN Game


Desc:        MSN Game


Type:        HTTP SEND


Begin Byte:  (Leave it as blank.)


Offset:      0
Format:     X-IM-URL
Content:    ^GET\s\/GameBrowser\/GameBrows



3. In ‘Control Settings’–>’Blocking Levels’–>’Level Name: Block MSN Game’–>in tab ‘Games and stock’, check ‘Block MSN Game’.



4. In ‘User-computer Table’, change the Blocking Rules of a certain IP –> ‘Save Settings’–>’Apply Changes’.



5.Now let’s check whether WFilter works!


How to block file uploading to internet in business networks?

For security purpose, you might want to block employees file uploading to internet on your network. However, since there are so many tools can be used for uploading, it is extremely difficult to block them all.

Files can be uploaded in various ways:
1. Upload to certain websites, eg: webmail, file sharing websites…
2. Using msn/yahoo/icq messengers to send files.
3. Email attachments.
4. FTP
5. Other third party tools.

WFilter provide a simply solution to block file uploading on company networks. Using WFilter, you can block file uploading and file transfers of all computers from ONE computer.

This tutorial will guide you to block file uploading using WFilter.

First, block file uploading to websites.


Please notice “block uploading files via web pages” only works on HTTP websites. To control HTTPs websites, you can use “HTTPS black/white list” in “Others” of WFilter.

Second, block email attachments.

Third, block FTP and file transfer via messengers.

Last, block unknown protocols.

Blocking unknown protocols blocks file uploading using other unknown third party programs.


More information, please check “WFilter Internet Content Filter”.

How to block facebook game using WFilter?

Sometimes you may want to block facebook games during working hours. This tutorial will guide you to block facebook games using “WFilter Enterprise”.

First, add a website black list.


Second, choose this website black list in certain blocking policy.


Third, apply this blocking policy to certain computers.


Now, facebook game is blocked.

How to block google talk and gmail chat on company network?

Google Talk (GTalk) is a free Windows and web-based application for instant messaging and voice over internet protocol (VOIP), offered by Google Inc. You may use “Google Talk” to send instant messages, transfer files, make PC-to-PC calls and audio conferencing.

However, sometimes you may want to block usage of google talk on company network. This tutorial will guide you to block google talk using WFilter.

Though instant messaging between the Google Talk servers and its clients uses an open protocol XMPP, it is more complicated and flexible than XMPP.
Google talk uses several ports to connect to its server:

1). Using Jabber standard tcp port 5222.
2). Using TLS port 443.
3). Using web chatting on port 80 in gmail.

So you can not block Google talk by simply blocking Jabber standard port. WFilter makes it simple to block google talk. Google talk connections can be identified and blocked by signature matching.

The below examples demonstrates blocking of google talk.

1. Blocking of Google talk and gmail chat

Set a blocking policy in WFilter to block jabber and google talk:

Blocked Google talk:

2. Block file transfer of Google talk

You also can block file transfer of Google Talk in WFilter. This will block file transfer of google talk without blocking of normal google talk text messaging.

More information, please check “WFilter Enterprise”.
Other related links:
How to block internet downloading?
How to monitor internet usage on company network?
Internet monitoring software for business
How to filter web surfing?
How to block websites and restrict internet access?
How to Block Bittorrent and bitcomet?
How to block msn file transfer?
How to block certain websites to save your productivity?
How to block AIM using WFilter?

How to block bbc iplayer on company network?

BBC iPlayer (formerly known as Integrated Media Player (iMP), Interactive Media Player, and MyBBCPlayer) is an internet television service, P2P, cable television, and several mobile devices developed by the BBC to extend its existing RealPlayer-based “Radio Player” and other streamed video clip content.

As online iPlayer may consume much internet bandwidth, this tutorial will guide you to block BBC iPlayer using WFilter. We suppose WFilter is already properly installed and is capable of monitoring/blocking other computers, if not, please read How to monitor internet usage on company network first.

WFilter’s “website black list” is based on website domains, so we can not use “website black list” to block iPlayer, since iPlayer is a subfolder of www.bbc.co.uk without a individual domain. However, we still can use “URL Keywords Filtering” feature to block url with certain keywords.

The below example demonstrates blocking of url with keyword “iplayer”.

1. Create a blocking policy, and enable “URL Keywords Filtering”.


2. Choose “Streaming Media” category and click the edit icon to edit its keywords list.


Please notice: WFilter already has some default keywords(the default
keywords are hidden). For example, “video” is already included in the
“Streaming Media” category. If you only want to block “iplayer”, you can add a new category in “Category Settings”->”Customize Categories” of WFilter.

In this example, we need to add “iplayer” to the keywords list:

3. Apply this blocking policy to certain computers.

4. By now, urls with keywords “iplayer” will be blocked.

More information, please check “WFilter Enterprise”.
Other related links:
How to block internet downloading?
How to monitor internet usage on company network?
Internet monitoring software for business
How to filter web surfing?
How to block websites and restrict internet access?
How to Block Bittorrent and bitcomet?
How to block msn file transfer?
How to block certain websites to save your productivity?
How to block AIM using WFilter?

How to upgrade wfilter manually?

It’s very simple to update your WFilter to the last version. This tutorial will guide you to update your WFilter manually.
Please follow below steps:


1. Download the last version from our website.





2. Uncompress the downloaded package and launch it.



3. Choose “Reinstall/Upgrade”.







Please notice: Reinstallation/upgrade will not change/delete your settings or monitored data.

Download url: http://www.wfiltericf.com/download_trial.htm


How to block sending emails with attachment on company network?

WFilter can be used to block sending/receiving emails, block sending attachments and filter email accounts. And you only need to install WFilter in one computer to monitor all computers in your network.

This tutorial will guide you to block outgoing emails with attachments.

1. Block outgoing emails with attachment(s)

This feature can block sending of emails with attachments via SMTP protocol.

1.1 Add a new blocking level, as in the below figure:

1.2 Set a proper “Level Name” and “Level Desc”, check “Block sending emails with attachment(s)”, as in Figure 2:

1.3 Apply this new blocking level to certain users in “User-computer Table”, as in the below figure:

1.4 Emails with attachment(s) will be blocked, as in Figure 4:

Blocking adapter doesn’t work when using two network cards with WFilter.

Some switches does not allow outgoing traffic on a mirroring port. In this case, WFilter needs a separate blocking adapter to send blocking packets. And if you’re monitoring and filtering more than 100 computers, we recommend you to use a different blocking adapter as the monitoring adapter.

When the two network cards are installed, we will want the Windows system to use the blocking adapter to access your network. However, sometime the Windows system might pick up the monitoring adapter and fails to connect to your network. This problem can be resolved by the “Automatic Metric” setting in Windows.

A metric is a value that is assigned to an IP route for a particular
network interface that identifies the cost that is associated with
using that route. The Automatic Metric feature is configured independently for each network interface in the network. This feature is useful in situations where you have more than one
network interface of the same speed, for example, when each network
interface has been assigned a default gateway. In this situation, you
may want to manually configure the metric on one network interface, and
enable the Automatic Metric feature to configure the metric of the
other network interface. This setup can enable you to control the
network interface that is used first in the routing of IP traffic.

In our case, the “Automatic Metric” of the blocking adapter shall be smaller than the monitoring adapter. So by setting “Automatic Metric” of the blocking adapter to “1″, and the monitoring adapter to “2″, Windows system will use the blocking adapter to access your network.

Use dumpPacket.exe of WFilter to generate a packet dump file.

Sometimes, on an indeterminate problem of using WFilter, we might need a packet dump file for diagnosis. WFilter has a packet dump tool named “dumpPacket.exe”, which will dump packets on the monitoring adapter.

This tutorial will guide you to generate a packet dump file using “dumpPacket.exe”.

First, lauch “dumpPacket.exe” from “Start”->”IMFirewall WFilter”->”Tools”. If you didn’t install WFilter shortcuts, you can find this tool in WFilter directory.


It will ask you to enter a testing ip address. For example, if
you need to check a monitoring problem for ip “192.168.1.20″, you can
input “192.168.1.20″ here. If you just want to capture some packet
samples, you may just press “enter” here! Press “enter” means dumping
packets for all computers.

Close the dumping window. If you’re doing a certain test, you need to wait until the test is done. For example, sending an email message.  If you’re dumping packets for all computers, you only need to wait for 3-5 seconds because the dump file can be very large. If the dumping file is too large, you can do the test again in a shorter time.

The dump.cap file can be found in “temp” directory of WFilter. The dump.cap file is pcap format, which can be opened by wireshark and other pcap applications.