Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am blocking a website using router.It is working fine for non-secured URL but not working for secured URL(https).Any suggestions?

share|improve this question
add comment

1 Answer

You can block a website using URL or IP. Both ways can be used in http mode (clear text). However, you can block the website only using IP in https mode (encrypted). This is simply because the URL is also encrypted in https mode.

One way to block a website in https mode using its URL is to use a proxy server. Your users will send the requests to this proxy and this proxy can then block any website it is configured to do so.

share|improve this answer
    
The problem is we are using dynamic ip system. Can i do it for some range of IP's.For example i have to block "https:facebook.com". Thanks? –  Palani Jan 25 '12 at 10:33
2  
You can block all facebook IPs if you want, but your users can bypass this by using some proxy server. –  Khaled Jan 25 '12 at 11:08
    
Okay. I will try to block using IP address. –  Palani Jan 25 '12 at 11:55
    
Even then, the IP range in use by facebook will eventually change. This is why you need a proxy that can MITM the SSL session and something like WCCP to redirect all traffic to your proxy internally thus preventing users from configuring their own proxy to bypass your rules. –  Paul Ackerman Jan 25 '12 at 15:38
    
@PaulAckerman: Yes, that's another point to consider. –  Khaled Jan 25 '12 at 15:54
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.