?
Solved

block a file?

Posted on 2006-11-21
8
Medium Priority
?
177 Views
Last Modified: 2010-04-10
Is it possible to block requests for a file through a cisco pix?  We were told by our isp that we had machines requesting a particular file that is virus related.  Until I can get my av solution under control, I would like to block the request for that file in the firewall.  Is that possible?  the request is on port 80, and for osa.gif

so infected machines are looking for http://variousdomainname/osa.gif

If so, how is this done in a pix IOS 6.3

Thanks!
Scott
0
Comment
Question by:scottman29
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +2
8 Comments
 
LVL 31

Expert Comment

by:Scott C
ID: 17990609
Why would you post a like to a potentially virus infected file?

Hopefully a moderator will remove the link immediately.
0
 
LVL 5

Author Comment

by:scottman29
ID: 17990647
that's not a real link, that was an example.
0
 
LVL 31

Expert Comment

by:Scott C
ID: 17990679
Ooops.  Sorry.

I should have looked at your stats and realized you would have known better.

Guess I jumped the gun on that one.
0
Get MySQL database support online, now!

At Percona’s web store you can order your MySQL database support needs in minutes. No hassles, no fuss, just pick and click. Pay online with a credit card.

 
LVL 7

Accepted Solution

by:
killbrad earned 750 total points
ID: 17990709
Not possible via PIX.  

Check out Squid proxy with DansGuardian content filtering.  Very useful stuff:

http://www.squid-cache.org/
http://dansguardian.org/
0
 
LVL 8

Expert Comment

by:caddlady
ID: 17992452
can you resolve the domain name to an IP address and block all outbound to that IP address?
0
 
LVL 8

Expert Comment

by:caddlady
ID: 17992470
Something like this:

access-list outbound deny tcp any xxx.xxx.x.x 255.255.0.0 eq www

0
 
LVL 5

Author Comment

by:scottman29
ID: 17993095
well, we do have a webfilter.  I blocked it in that.  The webfilter works with the pix...
0
 
LVL 27

Expert Comment

by:pseudocyber
ID: 17995792
No, not with the pix.  You can block layer 3 and 4 traffic.  File types is layer 6 & 7.
0

Featured Post

Enroll in August's Course of the Month

August's CompTIA IT Fundamentals course includes 19 hours of basic computer principle modules and prepares you for the certification exam. It's free for Premium Members, Team Accounts, and Qualified Experts!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Make the most of your online learning experience.
This month, Experts Exchange’s free Course of the Month is focused on CompTIA IT Fundamentals.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question