News on Steve Moffat’s Destination Sets from Steve himself:

Hey folks,

Sean Hennigan has very kindly pointed out the following regarding my destination sets.

<quote> Thanks for putting these deny lists together.  However, there is one major problem with your lists.  You have the majority of the sites with an asterisk in front of the domain name (*.hackit.us) so that it can block all the host names.  Problem is that it doesn’t block http://hackit.us. In ISA, we have to specify both hackit.us and *.hackit.us to block the main domain name and all of its host names.

So, you may need to update the list by adding the domain name without the asterisk.  I imported your deny rules and was able to access the sites without the host name but ISA did block it if I used any host name. <end quote>

He also very kindly updated the following sets for ISA 2004, (I will update the others for 2006 when I recover from visiting Thor…J

ISA2k4_AdvertisementSites.zip

ISA2k4_GamblingSites.zip

ISA2k4_OnlinechatSites.zip

ISA2k4_OnlineDatingSites.zip

ISA2k4_PornSiteDomains.zip and ISA2K4_proxies.zip

The site has been updated with the new sets.

Thanks

Steve

You can find Steve’s lists at http://www.isaserver.bm

HTH,

Tom

Thomas W Shinder, M.D.

Site: www.isaserver.org

Blog: http://blogs.isaserver.org/shinder/

Book: http://tinyurl.com/3xqb7

MVP — ISA Firewalls