Page 1 of 1

deny event script

Posted: Tue Apr 10, 2018 4:08 am
by enuro12
Say i want to block all outbound connections not in my allowed list. ie. Facebook denied, google allowed.

Then i want to get an alert anytime someone tries to access anything blocked. Who it was(client mac), and where they were going(ip/url ect). So i could then allow it via API.

How can i capture that event / data?

Re: deny event script

Posted: Tue Apr 10, 2018 10:53 pm
by enuro12
Any thoughts?