Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm block HTTPS Port in iptables:

$IPTABLES -A FORWARD  -p tcp --dport $HTTPS_PORT -j DROP
$IPTABLES -A FORWARD  -p tcp --sport $HTTPS_PORT -j DROP
$IPTABLES -A FORWARD -p ALL -d $YOUTUBE_IP -j DROP

It's work in local network without proxy.

But I have another network, which works through proxy.

How can I modify this rules to work in network with proxy?

Question wasn't solved, but professor said me that blocking, for example youtube.com through iptables in proxy not good idea. But blocking for example ssh port or another is good.

Then I modified my examples. In my example I have only one site that may access without proxy: vmk.ugatu.ac.ru.

So I show that iptables blocks proxy port 8008 and then clients can't access to internet through proxy, but they can access to vmk.ugatu.ac.ru without proxy. Another example: I block http port and client cant access to vmk.ugatu.ac.ru without proxy.

So question doesn't need to solve, thanks to all for help)

share|improve this question
    
Proxy is on the same server? On which port? –  Laurentiu Roescu Nov 6 '12 at 11:20
    
It looks like proxy.ugatu.ac.ru:8008. Not in the same server. –  nub Nov 6 '12 at 11:23
    
And you want to block only HTTPS traffic, allowing HTTP? –  Laurentiu Roescu Nov 6 '12 at 12:02
add comment

closed as not a real question by MadHatter, splattne Nov 7 '12 at 13:04

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

Browse other questions tagged or ask your own question.