Results 1 to 6 of 6
  1. #1
    Newbie
    Join Date
    Jan 2020
    Posts
    4

    Default Web Filter Priority

    As Iím am learning how to use Untangle and the Web Filtering application I have a question pertaining to the priority of the different places an allow or restrict can be input. Below are the following areas, which will take higher priority over another.

    Categories

    Block Sites

    Pass Sites

    Pass Clients

    Rules

    For a generic example, if I block all Categories, set Pass Sites *.google.com and then set Block Sites for mail.google.com and maps.google.com, which level takes priority?

    Also, if I am also using Application Control along with Web Filter. Are these two apps processed independently or concurrently? Which will take priority?

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,762

    Default

    The order of evaluation is Pass Clients , Pass Site, Block Site, and then Categories. First match exists the evaluation. So if a client is matched, the session is passed even if it matches a category.

    Each app is processed separately and each can block the session.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Newbie
    Join Date
    Jan 2020
    Posts
    4

    Default

    Thanks for the quick reply...

    So in my example, anything to *.google.com would pass (first match) even though mail.google.com and maps.google.com are blocked later in block sites?

  4. #4
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,762

    Default

    Quote Originally Posted by JustMe View Post
    So in my example, anything to *.google.com would pass (first match) even though mail.google.com and maps.google.com are blocked later in block sites?
    Technically yes but the practical issue is that Google uses many domains for mail as one example.
    Last edited by jcoffin; 01-31-2020 at 03:40 PM.
    Jim.Alles likes this.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Untangle Ninja Jim.Alles's Avatar
    Join Date
    Jul 2008
    Location
    Central PA
    Posts
    2,469

    Default

    I am not sure that *.google.com does what you want.
    I think .google.com/ is a better matcher as an example, in my experience.

    That still does not make it practical for Google. however.

  6. #6
    Untangle Ninja f1assistance's Avatar
    Join Date
    Apr 2009
    Location
    Holly Springs, NC
    Posts
    1,495

    Default

    People don't understand the depth and reach of 'The Google'...you'll end up breaking your interweb and the surfing experience will suuuuck!
    I'd suggest simply not using Alphabet's services where possible and installing the 'NoScript' Add-On in your browser and attempt to enjoy the show...
    Jim.Alles likes this.
    Vanguard Untangle...because nothing's worse than doing nothing!
    -------
    2, Pentium (R) Dual-Core CPU E5300 @ 2.60GHz 2599.968, 2089.96MB RAM
    And building #7 didn't kill itself!

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2