I like blocking facebook.com as a solution via DNS. You can also do it by modifying host files. We accomplish this by updating hostfiles using a script when a user logs in. so depending on the users access they get a different host file.
On Wed, Jul 13, 2011 at 9:24 AM, Rocco Radisch <[email protected]> wrote: > Hi, > transparent proxies work by redirecting traffic designated to the WWW on > port 80 to the internal proxy port (e.g. 3128). The standard products don't > implement redirection of port 443/https as it would break access to normal > HTTPS sites. Nevertheless, it is possible to "proxy" SSL traffic but only if > you use your own certificates and then narrow the re-direction to only those > servers you have a certificate installed in Squid. That is how SSL > accelerators, SSL proxy/reverse-proxy appliances work. Remember, Squid is > primarily a web cache, not really meant for blocking URLs. > You could also block "facebook.com" via your internal DNS server, pointing > to 127.0.0.1 etc. > Cheers, > Rocco > > > On 13/07/2011 3:54 PM, Baluku Godfrey wrote: > > Hello, > > I've been runing squid as a tranperent proxy on Ubuntu 11.04. I've realised > lately that it can not block https requests. For example, it blocks > http://www.facebook.com but to does not block https://facebook.com. I > perfectly know that configuring SQUID to transparently intercept SSL (HTTPS) > connections is not possible(some websites say so), but is there a way of > successfully going around this? > > I want some sites to be accesed at specific time. > > Thanks. > -- > “Quam minimum quam diutissime". > Godfrey Baluku > *IT Tech* > Bwindi Community Hospital > www.bwindihospital.com > KypeID: bmgodie > > > > > > _______________________________________________ > The Uganda Linux User Group: http://linux.or.ug > > Send messages to this mailing list by addressing e-mails to: [email protected] > Mailing list archives: http://www.mail-archive.com/[email protected]/ > Mailing list settings: http://kym.net/mailman/listinfo/lug > To unsubscribe: http://kym.net/mailman/options/lug > > The Uganda LUG mailing list is generously hosted by INFOCOM: > http://www.infocom.co.ug/ > > The above comments and data are owned by whoever posted them (including > attachments if any). The mailing list host is not responsible for them in any > way. > > > _______________________________________________ > The Uganda Linux User Group: http://linux.or.ug > > Send messages to this mailing list by addressing e-mails to: > [email protected] > Mailing list archives: http://www.mail-archive.com/[email protected]/ > Mailing list settings: http://kym.net/mailman/listinfo/lug > To unsubscribe: http://kym.net/mailman/options/lug > > The Uganda LUG mailing list is generously hosted by INFOCOM: > http://www.infocom.co.ug/ > > The above comments and data are owned by whoever posted them (including > attachments if any). The mailing list host is not responsible for them in > any way. > -- Sanga M. Collins Network Engineering ~~~~~~~~~~~~~~~~~~~~~~~ Google Voice: (954) 324-1365 E- fax: (435) 578 7411
_______________________________________________ The Uganda Linux User Group: http://linux.or.ug Send messages to this mailing list by addressing e-mails to: [email protected] Mailing list archives: http://www.mail-archive.com/[email protected]/ Mailing list settings: http://kym.net/mailman/listinfo/lug To unsubscribe: http://kym.net/mailman/options/lug The Uganda LUG mailing list is generously hosted by INFOCOM: http://www.infocom.co.ug/ The above comments and data are owned by whoever posted them (including attachments if any). The mailing list host is not responsible for them in any way.
