ForeFont TMG 2010 - Block Youtube - firewall

I want to block youtube with TMG 2010
I try with url name
youtube.com/* or .youtube.com or youtube.com:443 or youtube.com:443/ or .youtube.
...
I aslo add content fliter
video/mp4
video/x-flv
video/x-ms-asf
and stop Flash player
application/x-shockwave-flash
User cannot access www.youtube.com directly but they can access youtube.com/watch?v=xxxxx and view video without problem.
User can access youtube.com and view video without any problem.
Please help me slove this problem.
Thanks and best regards.

You can make a forward zone called youtube.com on your internal DNS and give it IP of 127.0.0.1 or your can make denied page and pointing to it. This worked for me.

Related

htaccess Deny all except url

I use my website to host some files, but I do not want users to download the files directly. I first want to show a preview of the docx file (what I am doing via the officeviewer from Microsoft).
Since the viewer is an embed-link that has a parameter to the file, I obviously can't block the URL from Microsoft.
I have tried to allow it by IP, by URL and have been looking around on the internet, but I haven't found a solution yet that works for me. I mostly found solutions to block a site from viewing and I have no clue to make it inverse.
My code is currently this:
Order deny,allow
Deny from all
Allow from view.officeapps.live.com
How can I keep denying all, but allowing the domain of view.officeapps.live.com?
Thanks in advance

Displaying page in a frame - Yandex Metrica Webvisor

I have a problem with Yandex Metrica - the webvisor function isn't working on all pages. Instead, it displays
"Not possible to replay visit on the given page.
Possible reasons:
Counter code not configured
Displaying this page in a frame is forbidden"
Is there any way to bypass it? Tried X-Frame-Options Allow-from, but didn't work and I heard it isn't supported in many browsers.
Best regards,
Kuba
Try to disable all AdBlocker Plugins like AdBlock Plus or uBlock Origin. The Session Replays open in a new window and the domain changes from yandex.com to webvisor.com. So be sure to disable your AdBlocker Plugins for the domain Webvisor.com.
Hope that helps! Worked for me :)
in .htaccess file add
Header always set X-Frame-Options SAMEORIGIN

Traffic Camera KML link address from FTP

A free KML link on CA traffic camera is working on my dashboard, (http://quickmap.dot.ca.gov/data/cctv.kml), but when I save the file into my FTP server and create a new link, the link is dead. (http://imodelicon.com/pinkertan/trafficcamera/California%20Traffic%20Camera.kml)
Does anyone know why and how to fix the issue?
Thanks,
Your server is serving the KML with the wrong "Content-Type": Content-Type: text/plain
Per the documentation, that should be:
application/vnd.google-earth.kml+xml

How to save all binary web browser traffic

I'm using Firebug and NetExport on Linux to save all web browser communication (mostly HTTP and HTTPS requests and responses). However, in my .har file I see messages like this:
The resource from this URL is not text: http://...
Instead of these messages I want to see the actual, full binary content (not even a single bit transformed or changed or lost). How do I get that?
I have root access on the local machine. A solution using Chrome or Firefox is fine.
Please don't recommend that I download binary files manually, there are too many of them, and I need to time the downloads perfectly, with the correct set of cookies (which may expire by the time I download manually). Please don't recommend non-Linux solutions, I have access only to Linux systems. Please don't recommend Wireshark (or tcpdump), because it can't save decrypted HTTPS traffic if I don't have the private key of the server.
In about:config I've set extensions.firebug.cache.mimeTypes to a space-separated list of MIME types, restarted Firefox, and everything got saved.
application/x-shockwave-flash image/gif image/jpeg image/png application/octet-stream
Please note that some documents are still missing from the .har file, I get this:
Reload the page to get source for: http://...

I need to prevent the files that are on my drupal website from beeing downloaded from outside even when they're on public nodes

I've set this in a .htaccess
ErrorDocument 403 http://websiteip.fr/fonds-spe/document-indisponible
order deny,allow
deny from all
allow from websiteip
allow from 127.0.0.1
allow from localhost
That .htaccess works : each time I'm trying to download a file via the "Apache" URL, I got the Error Document - that's ok.
BUT
with that, even Drupal can't access the files to display or play them (some are videos or sounds).
For example, on a node with an image in it, I got This image failed to load.
Any idea suggestion welcome
Each client will have a different public IP ... .htaccess is not the way to accomplish this. You'd be better suited modifying Drupal (via module) . Keep in mind however, if it plays on the screen or through the speakers, it can be recorded /downloaded /etc.
We use the Private Upload module on our site to protect files from being downloaded.
http://drupal.org/project/private_upload

Resources