I'm using Squid Proxy 3.1 as transparent proxy server, I want to block facebook.com but while listed in blocked list , Some user's accessing facebook using https, how can i block only https for facebook
3 Answers
I think you can get the most up-to-date list of Facebook IP addresses using the folowing query
whois -h whois.radb.net '!gAS32934'
The current list is somewhat longer than the one in your comment above. It should be fairly easy to parse the output of that query and load it into your firewall.
And if you decide to go explicit proxy way, be sure to setup ICAP web filtering with Squid and (possibly) HTTPS/SSL bumping. In this case SquidGuard will be able to filter actual HTTPS urls. If it is not possible to perform HTTPS filtering - use qlproxy to block access to CONNECT:443 request for facebook.com domain name only as you require.
-
-
Probably something like 6pmsolutions.com/2013/11/18/squid-transparent-ssl-interception– RafaelFeb 20, 2014 at 10:26
-
Try this in squid.conf:
acl blockfb dstdomain -i ".facebook.com"
http_access deny blockfb
Since the initial CONNECT request still comes through as HTTP, it should be able to catch it and block it.
https
, you don't get to see the name of the server they're trying to reach, only the IP address.If i mentioned the proxy settings in Browser user's used to change it
- Update your firewall so if they do change it they won't be able to access the Internet. That means block all outgoing traffic that doesn't pass through the proxy. You can make exceptions for a few sites you explicitly whitelist.