Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: asaidi on August 30, 2011, 02:08:42 PM

Title: How do I block users from visiting https://www.facebook.com?
Post by: asaidi on August 30, 2011, 02:08:42 PM

Hello.  I need to block students from accessing facebook.com but it looks like if one types https://facebook.com, they are able to bypass dansguardian.  How do I block this site in sme server 7?

Thanks.

Title: Re: How do I block users from visiting https://www.facebook.com?
Post by: cactus on August 30, 2011, 05:25:50 PM

Quote from: asaidi on August 30, 2011, 02:08:42 PM

Hello.  I need to block students from accessing facebook.com but it looks like if one types https://facebook.com, they are able to bypass dansguardian.  How do I block this site in sme server 7?

AFAIK you can not block https traffic by the nature of the protocol. Do a search in the forums as I seem to remember this has been asked in the past. Suggested keywords: dansguardian, https

Title: Re: How do I block users from visiting https://www.facebook.com?
Post by: janet on August 30, 2011, 05:36:58 PM

asaidi

A workaround is that you can add facebook.com to the SME server Domains panel in server manager. Select Resolve locally.
Then when a user behind SME server who uses SME as their gateway for Internet access tries to access https:/facebook.com they will be redirected to your nominated site (as per the content location for that domain in server manager eg the primary domain site).
This will apply to all users.

Title: Re: How do I block users from visiting https://www.facebook.com?
Post by: Stefano on August 30, 2011, 05:52:44 PM

if you are a little BOFH inside, you could something like this:

http://www.serbestcagrisim.com/archives/better-faster-stronger

;-)

Title: Re: How do I block users from visiting https://www.facebook.com?
Post by: CharlieBrady on August 30, 2011, 10:25:31 PM

Quote from: mary on August 30, 2011, 05:36:58 PM

This will apply to all users.

It will apply to all users - except those who know how to adjust their hosts file, or use 8.8.8.8 for DNS resolution, and who know to use https.

Nevertheless, it's a good simple (partial) solution.

Title: Re: How do I block users from visiting https://www.facebook.com?
Post by: CharlieBrady on August 30, 2011, 10:26:40 PM

Quote from: Stefano on August 30, 2011, 05:52:44 PM

if you are a little BOFH inside, you could something like this:

http://www.serbestcagrisim.com/archives/better-faster-stronger

I don't think that will work for https.

Title: Re: How do I block users from visiting https://www.facebook.com?
Post by: Stefano on August 30, 2011, 11:00:50 PM

AFAIK images are not under https..

Title: Re: How do I block users from visiting https://www.facebook.com?
Post by: CharlieBrady on August 31, 2011, 05:11:36 AM

Quote from: Stefano on August 30, 2011, 11:00:50 PM

AFAIK images are not under https..

OK, so squid can block images from facebook... :-)

Title: Re: How do I block users from visiting https://www.facebook.com?
Post by: gbentley on September 07, 2011, 02:32:13 PM

I use opendns for this job - works a treat!

Title: Re: How do I block users from visiting https://www.facebook.com?
Post by: hawk on September 07, 2011, 04:49:36 PM

i have been using untangle, works either inline with your sms server or in parallel, the free option servers all our needs.

tks john