Time Based Content Filtering Policy
-
Is Custom Error Page Possible with Firewall-Alias method.
-
Thanks for your kind reply. But i want to block the category "Social Networking". And i want to allow this category for limited time only, in the off time, i want to block it for my corporate users. I am using transparent proxy.
If you just want to block "facebook.com" this can be easy realized:
Create a "host" alias with "facebook.com"
Create a shedule with the times when you want to block facebook
Create a BLOCK firewall rule on your lan interface with the alias you created above as "destination IP" and scroll down and select the shedule you createdSo this rule blocks traffic to facebook.com when the shedule times are active and if they are not active this rule is disabled.
PS: The alias "facebook.com" just blocks facebook.com. It does not automatically block "xyz.facebook.com" So you need to add every subdomain to the alias if you want to block them.
The other possibility is squid + squidguard but then there is the problem of tranparent and non-tranparent proxy and filter http and https sites which makes all more complicated.
Try and give feedback.
-
This is what i did,
But it's blocking sometimes. And sometimes it's allowing.- Logged into the router
- Firewall-Aliases
(Created Aliases with type -hosts and added www.facebook.com , facebook.com , www.fb.com, fb.com - Firewall-Rules
(Created a Rule on LAN Interface, Action-Block, Protocol-any, single host or alist-<mytestip>, Destination Single host or alias and selected the created alias. move the rule to second top after anti lock our rule.
saved everything.</mytestip>
It worked..
I was happy…
after an hour i tried.. i was able to browse facebook. while i was browsing it again blocked after few minutes.
so it's acting funny.
Did i miss something important
Thanks
kalu -
also i reset the firewall state
:) -
Will you share the screenshot of Alias Page & Rule.
This is what i did,
But it's blocking sometimes. And sometimes it's allowing.- Logged into the router
- Firewall-Aliases
(Created Aliases with type -hosts and added www.facebook.com , facebook.com , www.fb.com, fb.com - Firewall-Rules
(Created a Rule on LAN Interface, Action-Block, Protocol-any, single host or alist-<mytestip>, Destination Single host or alias and selected the created alias. move the rule to second top after anti lock our rule.
saved everything.</mytestip>
It worked..
I was happy…
after an hour i tried.. i was able to browse facebook. while i was browsing it again blocked after few minutes.
so it's acting funny.
Did i miss something important
Thanks
kalu -
here are my screen shots
alias
rules
-
by the way i'm using
2.1-DEVELOPMENT (i386)
built on Wed May 2 08:30:27 EDT 2012
FreeBSD 8.3-RELEASEso i'm not quite sure the menus and features are exactly same or not.
thanks -
I have followed this thread: http://forum.pfsense.org/index.php/topic,46324.0.html. Every thing is working very nice. May be this is the right way to do it.
Really pfSense is having great sense.
-
please let us know.
if the schedule based blocking is also working.
Thanks
kalu -
Yes it is working perfectly. I have implemented it, in my office.
please let us know.
if the schedule based blocking is also working.
Thanks
kalu -
oh that's great.
could you please let us know your
pfsene, squid and squidguard version information ? -
The information is given below:
Version 2.0-RC3 (i386)
built on Tue Jun 21 16:50:25 EDT 2011Ask if you need any other detail.
Regards,
VJ@@@//
oh that's great.
could you please let us know your
pfsene, squid and squidguard version information ? -
The information is given below:
Version 2.0-RC3 (i386)
built on Tue Jun 21 16:50:25 EDT 2011Ask if you need any other detail.
Regards,
VJ@@@//
oh that's great.
could you please let us know your
pfsene, squid and squidguard version information ?oh yes. please tell me your squid and squidguard version.
Thanks