How to deny some user use google drive

Forums

Offline

How to deny some user use google drive

Resolved

0 votes

How to deny some user use google drive ?
We have clearos gateway v.6. We want to specific block some user or ip (local LAN) access or open google drive.
We need protection cloud services from inside to outside.

In Firewall

Thursday, December 13 2018, 08:24 AM

Share this post:

Accepted Answer

Nick Howitt

Offline

Thursday, December 13 2018, 08:51 AM - #Permalink

Resolved

0 votes

You really need to upgrade to ClearOS7. In 7, the Application Filter may be able to block it. If not you'll need the Business version of Gateway Management.

You may be able to block it by blocking the following domains:

drive.google.com

goo.gl

docs.google.com

client-channel.google.com

lh1.google.com

lh2.google.com

lh3.google.com

lh4.google.com

lh5.google.com

lh6.google.com

googleapis.com

tools.google.com

accounts.google.com

gg.google.com

pack.google.com

clients.l.google.com

mtalk.google.com

calendar.google.com

safebrowsing.google.com

safebrowsing-cache.google.com

l.google.com

gstatic.com

This can be done in the hosts file by mapping each one 127.0.0.1 or, better, your LAN network IP. This is normally the .0 address of your LAN subnet, so if ClearOS is on 192.168.1.1, you'd redirect to 192.168.1.0. This method only works if ClearOS is the DNS server for your LAN.

The reply is currently minimized Show

Responses (2)

Accepted Answer
Nick Howitt

Offline
Thursday, December 13 2018, 09:52 AM - #Permalink
Resolved

0 votes

I think the only sensible way to block a single user is with Gateway Management in ClearOS 7.

The only alternative I can think of is to set up the hosts file mapping all the domains I listed to a valid external IP address for that domain then setting up a whole bunch of Custom Firewall rules blocking the one LAN IP from accessing those WAN IP's. This is not a brilliant solution as all those domains generally resolve to a list of IP's for load balancing reasons. To map each to a single IP defeats the load balancing for everyone.
The reply is currently minimized Show
Accepted Answer

Thanet Me Phana

Offline
Thursday, December 13 2018, 09:25 AM - #Permalink
Resolved

0 votes

Nick Howitt wrote:

You really need to upgrade to ClearOS7. In 7, the Application Filter may be able to block it. If not you'll need the Business version of Gateway Management.

You may be able to block it by blocking the following domains:
drive.google.com goo.gl docs.google.com client-channel.google.com lh1.google.com lh2.google.com lh3.google.com lh4.google.com lh5.google.com lh6.google.com googleapis.com tools.google.com accounts.google.com gg.google.com pack.google.com clients.l.google.com mtalk.google.com calendar.google.com safebrowsing.google.com safebrowsing-cache.google.com l.google.com gstatic.com
This can be done in the hosts file by mapping each one 127.0.0.1 or, better, your LAN network IP. This is normally the .0 address of your LAN subnet, so if ClearOS is on 192.168.1.1, you'd redirect to 192.168.1.0. This method only works if ClearOS is the DNS server for your LAN.

Thank You for your Reply.
So if need block only one user or intetnal IP under clearos gateway. how to do that
The reply is currently minimized Show