Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to block traffic on port 443 based on the destination's ip address or is that encrypted?

share|improve this question

migrated from stackoverflow.com Jan 26 '11 at 22:57

This question came from our site for professional and enthusiast programmers.

    
Using what? It's easy on IPTables, but NAT can put numerous PCs behind a single IP. –  OMG Ponies Jan 26 '11 at 22:57
    
Yes you can. The traffic itself is encrypted but not the header details, because this shows where that information goes. apache? cpanel? php? what system are you using –  Jason Jan 26 '11 at 22:57
add comment

1 Answer 1

Remember that networking works with layers: (simplified)

  • IP
  • TCP
  • SSL
  • data (HTTP for example)

The IP address is below the SSL layers, so it is not "encrypted". Your firewall can do filtering based on the source and destination IP and destination TCP port (443).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.