Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to block traffic on port 443 based on the destination's ip address or is that encrypted?

share|improve this question

migrated from Jan 26 '11 at 22:57

This question came from our site for professional and enthusiast programmers.

Using what? It's easy on IPTables, but NAT can put numerous PCs behind a single IP. – OMG Ponies Jan 26 '11 at 22:57
Yes you can. The traffic itself is encrypted but not the header details, because this shows where that information goes. apache? cpanel? php? what system are you using – Jason Jan 26 '11 at 22:57

Remember that networking works with layers: (simplified)

  • IP
  • TCP
  • SSL
  • data (HTTP for example)

The IP address is below the SSL layers, so it is not "encrypted". Your firewall can do filtering based on the source and destination IP and destination TCP port (443).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.