D-Link DFL-1600 User Manual page 177

18.3. HTTP
URL Filtering
A Uniform Resource Locator (URL) is an address to a resource on the
WWW. This can for example be a HTML page, or a file resource. As a part
of a security policy, it might be useful to restrict access to certain sites, or
even to block certain file types to be downloaded. The opposite requirement
could also be true – it might be favorable to allow full access (i.e. no
removal of the above mentioned objects) to certain trusted resources.
A URL can be blacklisted in order to prevent access to it, while a
whitelisted URL allows full access to the specific resource.
Example:
In this example, a HTTP ALG in a D-Link firewall is created. It is
configured to strip ActiveX objects, which will block displays such as
Macromedia flash and shockwave. An undesired address is added into the
blacklist. Restrictions to other active contents, or whitelists for trusted
addresses can be configured in a similar way. We assume that the HTTP
service object and an IP rule to allow the HTTP traffic have been defined
in the firewall.
WebUI
:
1. ALG
Objects Application Layer Gateways
HTTP ALG:
General:
Enter a descriptive name for the ALG.
Name: http-activex
Active Content Handling
Check Strip ActiveX objects (including Flash)
Then click OK.
Configuring HTTP ALG
D-Link Firewalls User's Guide
Add
157