To dis-allow users from connecting to a site via IP rather than URL name (so bypassing filtering unless you use the time consuming forward / reverse lookup feature), uncomment the following line in the bannedsitelist: *ip To enable syslog, the default dansguardian.conf uses: # Syslog logging # # Use syslog for access logging instead of … Continue reading Dansguardian : lessons learned
Lessons learnt : ASA 8.4 and NAT rules
- DNS doctoring via NAT policies DNS doctoring is an ASA feature wherein a client sends a DNS request for a particular website, say http://www.example.com. This DNS request gets inspected by the ASA, and the ASA can then control which IP gets returned to the client (in essence the ASA acts as a DNS proxy). … Continue reading Lessons learnt : ASA 8.4 and NAT rules
David Vassallo's Blog 
You must be logged in to post a comment.