Access Control Lists - Novell GROUPWISE 7 - INTERNET AGENT Manual

Hide thumbs Also See for GROUPWISE 7 - INTERNET AGENT:
Table of Contents

Advertisement

Overriding a Blacklist
In some cases, a blacklist might contain a host from which you still want to receive messages. For
example, goodhost.com has been accidentally added to a blacklist but you still want to receive
messages from that host.
You can use the SMTP Incoming Exceptions list on a class of service to override a blacklist. For
information about editing or creating a class of service, see
Service," on page
748.

47.2.2 Access Control Lists

If you want to block specific hosts yourself rather than use a blacklist (in other words, create your
own blacklist), you can configure a class of service that prevents messages from those hosts. You do
this on the Internet Agent object's Access Control Settings page by editing the desired class of
service to add the hosts to the Prevent Messages From exception list on the SMTP Incoming tab. For
example, if you wanted to block all messages from badhost.com, you could edit the default class of
service to add badhost.com to the list of prevented hosts.
You can also create a list of hosts that you always want to allow messages from, so you can create
your own white list.
For information about editing or creating a class of service, see
Service," on page
748.
47.2.3 Blocked.txt File
ConsoleOne creates a
blocked.txt
Prevent Messages From exceptions list for the default class of service (see
"Controlling User Access to the Internet," on page
You can manually edit the blocked.txt file to add or remove hosts. To maintain consistency for
your system, you can also copy the list to other Internet Agent installations.
To manually edit the blocked.txt file:
1 Open the blocked.txt file in a text editor.
2 Add the host addresses.
The entry format is:
address1
address2
address3
where address is either a hostname or an IP address. You can block on any octet. For example:
IP Address
Blocks
*.*.*.34
Any IP address ending with 34
172.16.*.34
Any IP address starting with 172.16 and ending with 34
172.16.10-34.*
Any IP address starting with 172.16 and any octet from 10 to 34
You can block on any segment of the hostname. For example:
Section 47.1.2, "Creating a Class of
Section 47.1.2, "Creating a Class of
file that includes all the hosts that have been added to the
747).
Section 47.1,
Managing Internet Access 759

Advertisement

Table of Contents
loading

Table of Contents