• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

How to filter like "facebook" this word in pfsense??

Scheduled Pinned Locked Moved pfSense Packages
8 Posts 6 Posters 6.5k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K Offline
    kouevenwang
    last edited by Jan 28, 2010, 7:21 PM

    hi, i am a pfsense new, how can i filter the "facebook" this word ? in which package?? thanks

    1 Reply Last reply Reply Quote 0
    • S Offline
      Supermule Banned
      last edited by Jan 28, 2010, 7:46 PM

      No can do. Pfsense does not have L7 filtering in the release versions….

      1 Reply Last reply Reply Quote 0
      • K Offline
        kouevenwang
        last edited by Jan 28, 2010, 7:59 PM

        can i block the facebook domain ?? or block facebook the ip address??

        1 Reply Last reply Reply Quote 0
        • A Offline
          AhnHEL
          last edited by Jan 28, 2010, 10:33 PM

          If you're comfortable using OpenDNS servers for DNS then you can setup an account with them to block out Social Networking sites but this will block more than Facebook, it will block out MySpace amongst others.

          AhnHEL (Angel)

          1 Reply Last reply Reply Quote 0
          • M Offline
            mhab12
            last edited by Jan 29, 2010, 12:03 AM

            You can put facebook.com in the Squid blacklist via the GUI…the IP(s) would probably work there too.

            1 Reply Last reply Reply Quote 0
            • O Offline
              Oroboros
              last edited by Jan 29, 2010, 9:33 PM

              I've had a customer ask about blocking both myspace and facebook and am in a position where I could probably do it with snort (at least non-https traffic) or squid. We had a long conversation about it and left it open for now. People will tend to look for ways around forbidden things, and that creates its own set of security challenges. The end users may resort to proxy sites that aren't safe and in the end, that could create even bigger threats to network security.

              The right answer is adequate supervision and/or hiring only mature employees capable of self-restraint.

              1 Reply Last reply Reply Quote 0
              • K Offline
                kouevenwang
                last edited by Jan 29, 2010, 10:38 PM

                Thanks your suggestion…......thanks again

                1 Reply Last reply Reply Quote 0
                • J Offline
                  jigpe
                  last edited by Jan 31, 2010, 12:46 AM

                  @mhab12

                  They can access facebook if they use HTTPS.. Blocking facebook is useless if you have 443 opened. You cannot remove 443 too because people need to access gmail and other email that uses 443.

                  1 Reply Last reply Reply Quote 0
                  8 out of 8
                  • First post
                    8/8
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                    This community forum collects and processes your personal information.
                    consent.not_received