Topic: How do I block users from visiting https://www.facebook.com?

[asaidi]

Hello.  I need to block students from accessing facebook.com but it looks like if one types https://facebook.com, they are able to bypass dansguardian.  How do I block this site in sme server 7?

Thanks.

[cactus]

Hello.  I need to block students from accessing facebook.com but it looks like if one types https://facebook.com, they are able to bypass dansguardian.  How do I block this site in sme server 7?

AFAIK you can not block https traffic by the nature of the protocol. Do a search in the forums as I seem to remember this has been asked in the past. Suggested keywords: dansguardian, https

[janet]

asaidi

A workaround is that you can add facebook.com to the SME server Domains panel in server manager. Select Resolve locally.
Then when a user behind SME server who uses SME as their gateway for Internet access tries to access https:/facebook.com they will be redirected to your nominated site (as per the content location for that domain in server manager eg the primary domain site).
This will apply to all users.

[Stefano]

if you are a little BOFH inside, you could something like this:

http://www.serbestcagrisim.com/archives/better-faster-stronger

[CharlieBrady]

This will apply to all users.

It will apply to all users - except those who know how to adjust their hosts file, or use 8.8.8.8 for DNS resolution, and who know to use https.

Nevertheless, it's a good simple (partial) solution.

[CharlieBrady]

if you are a little BOFH inside, you could something like this:

http://www.serbestcagrisim.com/archives/better-faster-stronger

I don't think that will work for https.

[Stefano]

AFAIK images are not under https..

[CharlieBrady]

AFAIK images are not under https..

OK, so squid can block images from facebook...

[gbentley]

I use opendns for this job - works a treat!

[hawk]

i have been using untangle, works either inline with your sms server or in parallel, the free option servers all our needs.

tks john