Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote -2 down vote favorite

Is it possible to block traffic on port 443 based on the destination's ip address or is that encrypted?

share|improve this question
Using what? It's easy on IPTables, but NAT can put numerous PCs behind a single IP. – OMG Ponies Jan 26 '11 at 22:57
Yes you can. The traffic itself is encrypted but not the header details, because this shows where that information goes. apache? cpanel? php? what system are you using – Jason Jan 26 '11 at 22:57

migrated from stackoverflow.com Jan 26 '11 at 22:57

1 Answer

up vote 7 down vote

Remember that networking works with layers: (simplified)

  • IP
  • TCP
  • SSL
  • data (HTTP for example)

The IP address is below the SSL layers, so it is not "encrypted". Your firewall can do filtering based on the source and destination IP and destination TCP port (443).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.