Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: Nokia390 on November 29, 2011, 02:49:04 PM

Title: Block Dropbox
Post by: Nokia390 on November 29, 2011, 02:49:04 PM

Hi
I need to block dropbox. I try with dansguardian but no success.
It´s possible to block with iptables?
Tx

Title: Re: Block Dropbox
Post by: Stefano on November 29, 2011, 03:13:34 PM

hi

I think you should search elsewhere (google is the first place) then come back here with more info.. we then will help you to do it

Title: Re: Block Dropbox
Post by: Nokia390 on November 29, 2011, 03:47:00 PM

That´s what i have being doing, but no success

Dropbox use TCP port 443 (HTTPS)
208.43.202.0/24



But i can´t block https sites like https://facebook.com with dansguardian

Title: Re: Block Dropbox
Post by: Stefano on November 29, 2011, 04:18:14 PM

since you can't block https traffic, I guess you could block traffic to their ip range..

Title: Re: Block Dropbox
Post by: Nokia390 on November 29, 2011, 04:24:33 PM

I block all ip range (dropbox) but still users can login

Title: Re: Block Dropbox
Post by: Stefano on November 29, 2011, 06:07:43 PM

well.. this is what I see on my laptop:

Code: [Select]

tcp       38      0 192.168.25.4:39251      199.47.216.172:443      CLOSE_WAIT  1551/dropbox   
tcp        0      0 10.0.0.100:51423        199.47.217.148:80       ESTABLISHED 1551/dropbox   
tcp        0      0 192.168.25.4:36836      199.47.217.148:80       ESTABLISHED 1551/dropbox

as you can see the target ip is different from the one you posted..

since you're using dansguardian, following the advice you can find here (https://www.dropbox.com/help/23) you could block *.dropbox.com

let us know

Title: Re: Block Dropbox
Post by: Nokia390 on November 29, 2011, 06:17:05 PM

ok
Thanks
I´m go to try

Title: Re: Block Dropbox
Post by: Nokia390 on November 29, 2011, 06:23:38 PM

i had
*.dropbox.com
dropbox.com
to blocksitelist but still pass

Title: Re: Block Dropbox
Post by: Stefano on November 29, 2011, 06:23:57 PM

ok.. playing a bit here on ubuntu.. blocked dopbox blocking

199.47.217.0/24
208.43.202.0/24
107.20.249.0/24

you should search a bit to refine the ip ranges to block, otherwise you could block other sites too

Title: Re: Block Dropbox
Post by: Nokia390 on November 29, 2011, 06:28:48 PM

Thanks for your patience, I'll try
 Thank you very much

Title: Re: Block Dropbox
Post by: Nokia390 on March 28, 2012, 10:35:13 AM

Only block by:

iptables -t nat -I PREROUTING -p tcp --dport 443 -j DROP

but block ALL https sites

can i specify one? like https:\\facebook.com?

Tx

Title: Re: Block Dropbox
Post by: Brave Dave on March 28, 2012, 12:40:43 PM

I haven't tried this with dropbox, but used it with logmein and others

add dropbox to your domains (through the server-manager) - maybe thats dropbox.com - that way your machine will think it's dropbox.com

maybe tail your dnslog to see what dropbox hosts are being resolved

Title: Re: Block Dropbox
Post by: Nokia390 on March 29, 2012, 05:22:44 PM

Tx I´ll try.

Title: Re: Block Dropbox
Post by: janet on March 29, 2012, 06:04:11 PM

Brave Dave, Nokia390

Quote

add dropbox to your domains (through the server-manager)

Yes tested and confirmed that adding dropbox.com as a Domain in server manager Domains panel will block access, be sure to select Resolve locally
This "feature" should work for any domain.
Restart your workstation to take affect.

Title: Re: Block Dropbox
Post by: Nokia390 on March 29, 2012, 09:30:37 PM

simple and efficient, thank you very much.