Re: [squid-users] Block HTTPS website

2011-05-24 Thread Amos Jeffries
On 24/05/11 13:10, Malvin Rito wrote: Thanks, Could you send me a procedure on how to do this via Redhat box firewall. Using iptables to block HTTPS is: iptables -t filter -I PREROUTING 1 -p tcp --deport 443 -j REJECT You will have to contact RedHat or more specific support channels for

Re: [squid-users] Block HTTPS website

2011-05-23 Thread Malvin Rito
Thanks Amos. By the way my squid is currently setup as a Transparent Proxy do you think it will block HTTPS connections? How? Sorry I was just not too familiar with Squid config. Regards, Malvin On 5/20/2011 9:06 PM, Amos Jeffries wrote: On 20/05/11 21:54, Malvin Rito wrote: Here is my

Re: [squid-users] Block HTTPS website

2011-05-23 Thread Amos Jeffries
On 23/05/11 22:15, Malvin Rito wrote: Thanks Amos. By the way my squid is currently setup as a Transparent Proxy do you think it will block HTTPS connections? How? Yes. In a manner of speaking anyway. Intercepting HTTPS into the proxy will break low-level details of the SSL. The request will

Re: [squid-users] Block HTTPS website

2011-05-23 Thread Malvin Rito
Thanks, Could you send me a procedure on how to do this via Redhat box firewall. Regards, Malvin On 5/23/2011 8:04 PM, Amos Jeffries wrote: On 23/05/11 22:15, Malvin Rito wrote: Thanks Amos. By the way my squid is currently setup as a Transparent Proxy do you think it will block HTTPS

[squid-users] Block HTTPS website

2011-05-20 Thread Malvin Rito
Hi List, I want to block some websites (e.g. https://www.facebook.com) but unfortunately I cannot do it using acl dstdomain Can anyone help me please. Thanks in advance. Malvin

Re: [squid-users] Block HTTPS website

2011-05-20 Thread Malvin Rito
Hi Jason, I tried it but only block sites using http not https on the URL. Regards, Malvin On 5/20/2011 4:48 PM, Jason Doran wrote: Hi Malvin. we are blocking facebook here with dstdom_regex: acl my-desktop src 10.10.10.10/32 acl facebook dstdom_regex -i facebook.com http_access deny

Re: [squid-users] Block HTTPS website

2011-05-20 Thread Amos Jeffries
On 20/05/11 21:07, Malvin Rito wrote: Hi Jason, I tried it but only block sites using http not https on the URL. You keep failing to say what your config actually is. Only that the one way we know *does* work is not working for you. So we cannot really help. Details please. Regards,

Re: [squid-users] Block HTTPS website

2011-05-20 Thread Malvin Rito
Here is my config: acl lan src 122.3.237.66 172.16.9.0/24# Define LAN internet #acl lan src 172.16.18.2 172.16.0.0/16 #acl RestrictedHost_jobs src 172.16.9.80 #acl RestrictedHost_jack src 172.16.9.119 #acl RestrictedHost_esmie src 172.16.9.252 #acl RestrictedHost_grover src 172.16.9.109

Re: [squid-users] Block HTTPS website

2011-05-20 Thread Amos Jeffries
On 20/05/11 21:54, Malvin Rito wrote: Here is my config: Okay, should have worked where you placed it. What you need to do is add .facebook.com on a line in /etc/squid/restricted-sites.acl That will block facebook.com access for both HTTP and HTTPS with your config. The . at the start of