Page 1 of 3 123 LastLast
Results 1 to 10 of 22
  1. #1
    Newbie
    Join Date
    Nov 2009
    Posts
    6

    Default Social Network filter not blocking https sites

    Guys,

    I use WEB filter with Social Network blocking.

    But the filter is not blocking "https www facebook com" (I canīt post links in the forum because Iīm new here, so I removed the dots). The http site is blocking fine.

    Anybody has the same problem? Is it a bug or a misconfiguration from my part?

    Regards

  2. #2
    Master Untangler richie's Avatar
    Join Date
    Apr 2007
    Posts
    396

    Default

    webfilter can only scan on port 80.

  3. #3
    Untangle Ninja Mathiau's Avatar
    Join Date
    Feb 2008
    Location
    Costa Frickn' Rica
    Posts
    1,636

    Default

    https cant be blocked by the webfilter period, no matter what port it could be on i beleive...
    kv-2 | UT 11.0.1 | Dell R610 Server | Intel Xeon 2.8Ghz Quad Cores | 24Gb DDR3 ECC | 1 Intel QPort NIC | Integrated Broadcom QP | Dell Perc 4i | 6 x 73G 2.5 15k SAS raid 10 | 100mb/100mb | 30mb/30Mb

  4. #4
    Untangle Ninja dwasserman's Avatar
    Join Date
    Jun 2008
    Location
    Argentina
    Posts
    4,367

    Default

    ANd not only social network category, all category but https is bypassed.
    Try esoft for 15 days trial period.
    The world is divided into 10 kinds of people, who know binary and those not

  5. #5
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,398

    Default

    Well it's kinda hard to filter urls that are encrypted... https packets are a source IP, destination IP, and a pile of gibberish... so what do you want to filter with?
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  6. #6
    Newbie
    Join Date
    Nov 2009
    Posts
    6

    Default

    In our network we defined that social network sites are blocked. But the people discovered that they can access facebook using https. If we block port 443, nobody will access banks and other relevant sites. So what can we do?

    The same thing happens with twitter...

    Thanks!

  7. #7
    Untangle Ninja dwasserman's Avatar
    Join Date
    Jun 2008
    Location
    Argentina
    Posts
    4,367

    Default

    You can search what are the whole ip address of facebook and block them.
    The world is divided into 10 kinds of people, who know binary and those not

  8. #8
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,398

    Default

    Buy the eSoft filter, it can filter https. Use the trial first and test it if you want.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  9. #9
    Newbie
    Join Date
    Nov 2009
    Posts
    6

    Default

    We donīt want to expend some money. Iīll try to use the firewall. I will create a rule that block port 443 with destination network the facebook address class. Iīll post here the results.

    Thanks!

  10. #10
    Newbie
    Join Date
    Nov 2009
    Posts
    6

    Default

    A suggestion to the Untangle developer team:

    The web filter could analyse the URL, and block the domains that are classified as social network, for example.

    It will work only for sites accessed by URLs, but we can block any direct access via IP address, correct?

    It will be independent of the port used.

    Regards.

Page 1 of 3 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2