Blocking Facebook for an IP Pool

[pazza3564]

Originally Posted by wharfratjoe

And if you want to be creative and some fun with your users, point the internal dns entry for facebook.com back to a internal web server (say IIS) and create a page that says "We are watching you...HAPPY HOLIDAYS!" - Management

Something like that

[sky-knight]

To be honest, that's the easiest way to halt facebook access.

www.facebook.com and facebook.com if resolving to another web server other than what the real servers are, can be accomplished in a trivial way, and doesn't require a ton of IP blocks.

Youtube can be controlled via similar mechanisms. The only issue is DNS cache, but that expires soon enough.

And did I mention if you poison those domain names you get the HTTPs traffic too?