Blocking Access

Next: Configuring HTTP Caching Up: Configuring Access to Services Previous: Configuring Access to Services

**Figure 4.26:** The Access Blocks Setup Screen
$\includegraphics[width=14cm,height=10cm]{blksetup.ps}$

The Access Blocks Setup Screen (Figure 4.26) allows you to configure some attributes relating to blocking access to services.

The fields in this screen are:

Enforce Reverse DNS Lookups of External Client Hosts: If this is enabled, then external hosts that connect to TCP proxies will be denied access if the firewall fails to look up the hostname (domain name) for the IP address, and/or when subsequently looking up the address for the name this does not match the original address.
Deny SOCKS Access To: If you have one or more SOCKS TCP proxies configured, you may want to restrict what services SOCKS can be used to proxy, both for security reasons, and because the CEQURUX SOCKS server does not do any application-specific logging (such as logging WWW URLs) or blocking (such as NNTP newsgroups). You can enter a comma-separated list of services in this field to achieve this. The most common services to block are `http', `nntp' and `ftp'.

The available keys are:

Next: Configuring HTTP Caching Up: Configuring Access to Services Previous: Configuring Access to Services