Block alias in rule

lfph

HI, i kind of figure it out i think but it doesnt do the job!!
trying to block the https from facebook and i did like on the pix attached but it doesnt work. any idea?
thx.

alias_facebook.jpg_thumb

lan_reject_facebook.jpg_thumb

Metu69salemi

couple things:
your rule is blocking anything between 80-443
in what interface this rule is added

lfph

i'm using pfsense to filter some of the computers of the school where i'm working at. This rule is added in "school proxy filter" (that i created) as i want only certain computers to be filtered.

Metu69salemi

yes but in what interface this rule is applied?

lfph

here's a screenshot. does it help?

![Screen shot 2011-09-08 at 4.55.49 PM.png](/public/imported_attachments/1/Screen shot 2011-09-08 at 4.55.49 PM.png)
![Screen shot 2011-09-08 at 4.55.49 PM.png_thumb](/public/imported_attachments/1/Screen shot 2011-09-08 at 4.55.49 PM.png_thumb)

Metu69salemi

If the proxyinterface itself is the same as lan subnet, then it should work

lfph

well, it doesnt. here's my interface setup scrennshot.

![Billede 1.png_thumb](/public/imported_attachments/1/Billede 1.png_thumb)
![Billede 1.png](/public/imported_attachments/1/Billede 1.png)

Metu69salemi

rules work on ingress

So the rules must be implemented to that interface where you want it to work and must have same subnet as source

lfph

I think I'm starting to get it. I (think) made the proper changes. cannot try it now, i'll be at work first tomorrow afternoon. check the pix, what do you think?
thx a lot.

![Screen shot 2011-09-08 at 9.49.07 PM.png](/public/imported_attachments/1/Screen shot 2011-09-08 at 9.49.07 PM.png)
![Screen shot 2011-09-08 at 9.49.07 PM.png_thumb](/public/imported_attachments/1/Screen shot 2011-09-08 at 9.49.07 PM.png_thumb)

Metu69salemi

Looks ok, but you're still blocking everything between 80 and 443

lfph

that's right, made the change, let see if it works. thx again.

lfph

it does work now, thank you very much, i really appreciate.
s.