Presuming that is the right address for your region on this ball of
dirt, how do you access Google? Google and YouTube share the same
address block, which is addresses 74.125.239.0-74.125.239.14.

Google owns 74.125.0.0/16 for that matter. I don't doubt that they
have other netblocks, too.

{o.o}

On 2012/10/05 00:10, vivek chalotra wrote:
I have blocked youtube(ips from 74.125.236.0- 74.125.236.14) in my gateway
machine using the below rules:


iptables -A INPUT -i eth1 -s 74.125.236.0 -j DROP
iptables -A INPUT -i eth1 -p tcp -s 74.125.236.0 -j DROP
iptables -A INPUT -i eth0 -s 74.125.236.0 -j DROP
iptables -A INPUT -i eth0 -p tcp -s 74.125.236.0 -j DROP

but how to block on the whole network. Other hosts are still able to access 
youtube.

Vivek Chalotra
GRID Project Associate,
High Energy Physics Group,
Department of Physics & Electronics,
University of Jammu,
Jammu 180006,
INDIA.


On Thu, Oct 4, 2012 at 11:57 PM, Henrique Junior <[email protected]
<mailto:[email protected]>> wrote:

    Maybe you should take a look at ClearOS[1].
    It is a RHEL based distribution from a company that, now, develops
    layer7-filter. In a simple way I was able to block all FLV videos (even if
    the users are still able to reach youtube.com <http://youtube.com>, they can
    not see any videos).

    [1] - http://www.clearfoundation.com/Software/overview.html
    --
    Henrique "LonelySpooky" Junior
    http://about.me/henriquejunior

        
--------------------------------------------------------------------------------
        *From:* Konstantin Olchanski <[email protected]
        <mailto:[email protected]>>
        *To:* vivek chalotra <[email protected] 
<mailto:[email protected]>>
        *Cc:* [email protected]
        <mailto:[email protected]>
        *Sent:* Thursday, October 4, 2012 3:10 PM

        *Subject:* Re: Iptable rule required to block youtube

        On Thu, Oct 04, 2012 at 12:57:00PM +0530, vivek chalotra wrote:
         >
         > And now i want to block youtube on my network. kindly suggest iptable
        rules to do that.
         >

        "block youtube on my network" is not a very well defined wish.

        If you want to merely block the well known youtube IP and DNS addresses,
        you can use iptables, etc. Be prepared to update these lists frequently
        to keep up with things like youtu.be <http://youtu.be> & co.

        If you want to prevent users of the network from watching all youtube
        videos always,
        give up now.

        First of all, you will have to be able to handle legitimate exceptions:
        "how do I watch training videos for Altera Quartus software that
        happen to be hosted on youtube?!?".

        Second, you will have to handle all the possible 3rd party redirectors,
        proxies, and other kludges specifically designed to circumvent
        youtube blockers such as you are try to build.

        --
        Konstantin Olchanski
        Data Acquisition Systems: The Bytes Must Flow!
        Email: olchansk-at-triumf-dot-ca
        Snail mail: 4004 Wesbrook Mall, TRIUMF, Vancouver, B.C., V6T 2A3, Canada



Reply via email to