Table of Contents
Advertisement
Configuration
Allow
Allowing connections for certain Clients/ networks:
Client
WebGate can activate certain Clients or networks using this option. Single Clients
Addresses
are set using their IP address. A network is set typing a '/' and its netmask (for
example, 192.168.1.0/24).
If you do not specify any IP address, the access is not restricted.
If you specify at least one IP address, the access is permitted only to the entered IPs.
Anyone else has no access.
Forbidden
Denying access to specific user agents:
Agents
You can specify one or more user agent strings that will be denied access. The main
purpose is to avoid unnecessary traffic generated by clients issuing range requests
(such as Microsoft's BITS "Background Intelligent Transfer Service") or streaming
services (such as Apple's iTunes). Range requests and data streaming are only
permitted if specified in AclConfigFile (see below).
Allowing connections for certain ports:
Allow
Destination
WebGate can limit the connections to certain destination ports, using this option.
Ports
You may specify domains with a hyphen.
If you do not specify any ports, the access is not restricted.
If you specify at least one port, the access is permitted only on the entered ports. Any
other port has no access.
AclConfigFile
Access control scheme:
WebGate can also support more complex rules by implementing a Squid-like access
control scheme. To use the access control scheme you must create a new
configuration file containing the rules describing the desired behavior and have
AclConfigFile contain the path to it. The syntax supported by the access control
scheme is described in the Manual.
WSLicense
License for the Avira Web Access and Content Control library. This is used for
Ticket
library authentication. This option and both WSKeyFile and WSBlockCategories
must be set in order to use the URL filtering capabilities of WebGate.
WSKeyFile
Key file used by Avira Web Access and Content Control library to encrypt traffic.
This option and both WSLicenseTicket and WSBlockCategories must be set in
order to use the URL filtering capabilities of WebGate.
WSBlock
URL filtering:
Categories
This option and both WSKeyFile and WSLicenseTicket must be set in order to use
the URL filtering capabilities of WebGate.
Note: For a list of all categories please consult the Manual.
Avira GmbH
AllowClientAddresses 127.0.0.1 192.168.0.0/16
ForbiddenUserAgents BITS iTunes
AllowDestinationPorts 21 80 1025-65535
AclConfigFile /etc/avwebgate.acl
WSLicenseTicket NNNN-NNNN-NNNN-NNNN
WSKeyFile /usr/lib/AntiVir/wskeyfile
WSBlockCategories 0-2 12 14 61
AntiVir WebGate
39
Advertisement
Table of Contents
