I would like to use masking on ip addresses when "Restrict browsing to specific sites" is enabled (under Filter Settings / Web).
More and more applications are using http (port 80) for communication other than just web browsing. I would like to be able to put an IP address in this list with an asterisk to include all ip addresses in that range.
Example:
111.222.0.*
This would allow port 80 traffic to all ip addresses starting with the above.
The programs we use content distribution servers that are picked at random. So the choice is either type 255 entries (111.222.0.0 - 111.222.0.254) in the list (which is absurd), or have our programs not work.
Technical Detail: The parsing logic for each tuple in the whitelist could include a few checks to see if it contains a masked ip address and allow all ip addresses in the bypass logic. I'm not sure how difficult adding a mask to the current filtering logic would be.
Please let me know if this is going to be feasible (without having to add the applications to Application Exceptions). If not, I may have to look for other software.
Thanks :)
CommentAuthormike808
CommentTimeNov 20th 2009 edited
I think the exceptions *do* allow wildcards. Have you tried making an exception and then editing the exception URL?
Remember, NN is *not* a firewall. It could be that what you want is a firewall to only allow traffic to certain external addresses. They filter on IP and port and sometimes even protocol. There are software firewall features built into Vista and Win7 as well as many routers (including WiFi routers) as well as standalone appliances to do this.