Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to know is it possible to have a web proxy that can block specific https websites ? We have a national web proxy that blocks Http websites for porn ,..etc but we have a problem of intercepting https websites , how can we solve it ?

share|improve this question
What are you currently using for your filtering? – Bart Silverstrim Jun 29 '11 at 12:57

There are two basic options for this. The first is to block websites by IP address. This has the obvious issue that it's going to require resolving all of the names on your blacklist, which may change over time, and that it will block innocent sites which happen to share an IP addr. with porn sites (although, if you're only blocking the IPs for https, the second issue should be reasonably minor - most sites use one IP per SSL site, to prevent cert errors).

The other way is to get a proxy that can do SSL MitM. Obviously, this will either present your users with certificate errors on accessing any https website, or require the installation of your CA on every computer using the proxy. It will also leave you with important privacy issues.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.