On Jan 24, 2011, at 1:09 PM, jam...@mail.milton.k12.wi.us wrote:
Hello Folks,
We're currently using squid + DG as a content filtering system and it's
fantastic. The problem lies with a combination of Squid + Safari and the
site facebook.com. Students can currently get around our blocks by
changing the protocol from http to https. The logs show that squid sees
the CONNECT function and tries to block it but it still passes through.
All other browsers it's fine and all other sites + safari it appears to
also be fine. Anyone have any ideas? We've tried blocking using DG and
then directly through squid by blocking the CONNECT function to facebook.
Squid version 3.0.STABLE24
Hi James,
I ran into the same problem using squidguard. I used a pretty harsh denial in
my firewall. My squid SG works in intercept mode so I wrote an IPFW
statement to deny https for facebook.
deny ip from any to 66.220.144.0/20 dst-port 443
deny ip from any to 69.63.176.0/20 dst-port 443
hope this helps
-j
