how can i block https://facebook.com without blocking other https?

[savasya]

i searched in this forum but i couldnt have found. it is not allowed to add https in eSoft Web filterin Blocking sites.
pls help me

[dmorris]

1) enable "categorize HTTPS by IP address" and block the social networking category.

2) use the firewall to block port 443 to all the facebook IPs you can find (but this will be a pain and a pain to maintain)

[savasya]

thanks, i couldnt access to https facebook. but when i enter the site "unable to connect" shown on my firefox. there is no blocking message.

is it same to block https:// twitter.com or the other social networking site?
i tried to block it with same way. but it s not working this way. i can reach twitter. is there any other way to block it?

[dmorris]

if you are getting unable to connect it is being blocked.

a block page cannot be shown because it is an encrypted connection.

[savasya]

what about https twitter?
and after i had done your advice about facebook, i havent access some sites for ex mail.yahoo.com, hotmail.com etc.
do you have another solution to block some specific https sites?

[dmorris]

in theory yes.

twitter uses amazon web services so it may be hard to categorize by IP.

[slapshot]

Blocking anonymous proxies is beyond the scope of this thread... BUT

I have started blocking https links to specific computers on your network using untangle... (i.e. block https://facebook.com)

This works OK in a home use environment, but would be a huge pain in a any environment with more than 10-20 IP devices


First... make sure to reserve specific IP addresses for the computers in question.

Now, in untangle, do this...
Networking > Advanced > Packet filters
Enabled: Checked
Action: Reject

Add -
Source Address: [ip address of specific computer to be blocked
Destination Port: 443
Protocol TCP, UDP

Apply / Save....

Now... any attempts to access https://[anything] will be blocked until such time that the ability to use anonymous proxies is found.

My way to block anonymous proxies is weekly diligence in acquiring proxy names and adding the to the web filter. (I know... not the most efficient method... but it does work.)

Limitation: This BLOCKS ALL HTTPS links to that workstation! Unfortunately, even legitimate options. Your mileage may vary.

[dmorris]

I would recommend doing this with the Firewall app over the Packet Filter.

Just make the same rule.

[savasya]

Blocking anonymous proxies is beyond the scope of this thread... BUT

I have started blocking https links to specific computers on your network using untangle... (i.e. block https://facebook.com)

This works OK in a home use environment, but would be a huge pain in a any environment with more than 10-20 IP devices


First... make sure to reserve specific IP addresses for the computers in question.

Now, in untangle, do this...
Networking > Advanced > Packet filters
Enabled: Checked
Action: Reject

Add -
Source Address: [ip address of specific computer to be blocked
Destination Port: 443
Protocol TCP, UDP

Apply / Save....

Now... any attempts to access https://[anything] will be blocked until such time that the ability to use anonymous proxies is found.

My way to block anonymous proxies is weekly diligence in acquiring proxy names and adding the to the web filter. (I know... not the most efficient method... but it does work.)

Limitation: This BLOCKS ALL HTTPS links to that workstation! Unfortunately, even legitimate options. Your mileage may vary.

1) enable "categorize HTTPS by IP address" and block the social networking category.

2) use the firewall to block port 443 to all the facebook IPs you can find (but this will be a pain and a pain to maintain)

it seems too limited. if it blocks all https, no one can access bank accounts some web mail service. untangle has to solve this problem by adding for ex https://facebook.com to block list. because i want to block https://youtube.com. but if i block via firewall other google services are being blocked. i think we need another solution.


another question
if facebook changes its ip address, what is going to be done? Do i have to check whether it changed its address or not?

[Helmikuu]

In my case, I been blocking facebook.com in pfsense server through squid.