Page 1 of 2 12 LastLast
Results 1 to 10 of 12
  1. #1
    Untangler
    Join Date
    Oct 2010
    Posts
    73

    Default how can i block https://facebook.com without blocking other https?

    i searched in this forum but i couldnt have found. it is not allowed to add https in eSoft Web filterin Blocking sites.
    pls help me
    Last edited by savasya; 11-04-2010 at 09:02 AM.

  2. #2
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Mateo, CA
    Posts
    12,980

    Default

    1) enable "categorize HTTPS by IP address" and block the social networking category.

    2) use the firewall to block port 443 to all the facebook IPs you can find (but this will be a pain and a pain to maintain)
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Untangler
    Join Date
    Oct 2010
    Posts
    73

    Default

    thanks, i couldnt access to https facebook. but when i enter the site "unable to connect" shown on my firefox. there is no blocking message.

    is it same to block https:// twitter.com or the other social networking site?
    i tried to block it with same way. but it s not working this way. i can reach twitter. is there any other way to block it?

  4. #4
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Mateo, CA
    Posts
    12,980

    Default

    if you are getting unable to connect it is being blocked.

    a block page cannot be shown because it is an encrypted connection.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Untangler
    Join Date
    Oct 2010
    Posts
    73

    Default

    what about https twitter?
    and after i had done your advice about facebook, i havent access some sites for ex mail.yahoo.com, hotmail.com etc.
    do you have another solution to block some specific https sites?
    Last edited by savasya; 11-04-2010 at 11:35 AM.

  6. #6
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Mateo, CA
    Posts
    12,980

    Default

    in theory yes.

    twitter uses amazon web services so it may be hard to categorize by IP.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  7. #7
    Newbie
    Join Date
    Apr 2009
    Posts
    1

    Default Block all HTTPS to specific workstation

    Blocking anonymous proxies is beyond the scope of this thread... BUT

    I have started blocking https links to specific computers on your network using untangle... (i.e. block https://facebook.com)

    This works OK in a home use environment, but would be a huge pain in a any environment with more than 10-20 IP devices


    First... make sure to reserve specific IP addresses for the computers in question.

    Now, in untangle, do this...
    Networking > Advanced > Packet filters
    Enabled: Checked
    Action: Reject

    Add -
    Source Address: [ip address of specific computer to be blocked
    Destination Port: 443
    Protocol TCP, UDP

    Apply / Save....

    Now... any attempts to access https://[anything] will be blocked until such time that the ability to use anonymous proxies is found.

    My way to block anonymous proxies is weekly diligence in acquiring proxy names and adding the to the web filter. (I know... not the most efficient method... but it does work.)

    Limitation: This BLOCKS ALL HTTPS links to that workstation! Unfortunately, even legitimate options. Your mileage may vary.

  8. #8
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Mateo, CA
    Posts
    12,980

    Default

    I would recommend doing this with the Firewall app over the Packet Filter.

    Just make the same rule.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  9. #9
    Untangler
    Join Date
    Oct 2010
    Posts
    73

    Default

    Quote Originally Posted by slapshot View Post
    Blocking anonymous proxies is beyond the scope of this thread... BUT

    I have started blocking https links to specific computers on your network using untangle... (i.e. block https://facebook.com)

    This works OK in a home use environment, but would be a huge pain in a any environment with more than 10-20 IP devices


    First... make sure to reserve specific IP addresses for the computers in question.

    Now, in untangle, do this...
    Networking > Advanced > Packet filters
    Enabled: Checked
    Action: Reject

    Add -
    Source Address: [ip address of specific computer to be blocked
    Destination Port: 443
    Protocol TCP, UDP

    Apply / Save....

    Now... any attempts to access https://[anything] will be blocked until such time that the ability to use anonymous proxies is found.

    My way to block anonymous proxies is weekly diligence in acquiring proxy names and adding the to the web filter. (I know... not the most efficient method... but it does work.)

    Limitation: This BLOCKS ALL HTTPS links to that workstation! Unfortunately, even legitimate options. Your mileage may vary.
    Quote Originally Posted by dmorris View Post
    1) enable "categorize HTTPS by IP address" and block the social networking category.

    2) use the firewall to block port 443 to all the facebook IPs you can find (but this will be a pain and a pain to maintain)
    it seems too limited. if it blocks all https, no one can access bank accounts some web mail service. untangle has to solve this problem by adding for ex https://facebook.com to block list. because i want to block https://youtube.com. but if i block via firewall other google services are being blocked. i think we need another solution.


    another question
    if facebook changes its ip address, what is going to be done? Do i have to check whether it changed its address or not?

  10. #10
    Newbie
    Join Date
    Jun 2010
    Posts
    2

    Default

    In my case, I been blocking facebook.com in pfsense server through squid.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2