Koozali.org: home of the SME Server

smeserver-webfilter and https site filter

Offline Stefano

  • *
  • 10,894
  • +3/-0
smeserver-webfilter and https site filter
« on: April 03, 2017, 11:34:22 PM »
Hi there


since almost every site is moving to https, is there anything I should be aware of if I decide to install smeserver-webfilter? any particular configuration?


will, for example, a porn site running on https be blocked?


thank you

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: smeserver-webfilter and https site filter
« Reply #1 on: April 04, 2017, 12:41:53 AM »
Https filtering is trickier, but possible, even if not as powerful. It's working with my webfiltering contrib. For it to work, you need to:
- configure sme as a proxy on all your browsers (you can't rely on transparent proxying)
- block outgoing TCP port 443, unless for some itself
- only domains can be blocked, not url
C'est la fin du monde !!! :lol:

Offline tw-lewis

  • *
  • 12
  • +0/-0
Re: smeserver-webfilter and https site filter
« Reply #2 on: February 14, 2018, 08:13:42 PM »
Sorry for replying to an older post.

Have you had any luck with getting an https transparent proxy working?

I'm using:
yum --enablerepo=epel,fws install smeserver-webfilter

Just "www.facebook.com" and "facebook.com" in the ban list but with no success. Am I missing something in the basic setup guide.

echo "SELECT DOMAIN,COUNT(DOMAIN) AS occurances FROM access_log GROUP BY DOMAIN ORDER BY occurances DESC LIMIT 30;" | mysql squid_log

Shows activity so I am assuming its working for http traffic maybe?