Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to block https://facebook.com

    Scheduled Pinned Locked Moved Firewalling
    23 Posts 13 Posters 38.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      spillek
      last edited by

      @dhatz:

      The easiest way (which would also work with the base pfsense install, i.e. no 3rd party packages like squid) would be to define an alias with Facebook's IP ranges in CIDR format (easily found online, or you can create the list yourself using whois etc), and create a block rule for that.

      I already try with below IP, but floating o lan rule don't work !

      1 Reply Last reply Reply Quote 0
      • S
        spillek
        last edited by

        no idea?

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          A single rule on lan denying access to your alias should work.

          Also include apps.facebook.com name on your alias.

          To use wpad/pac, follow this tutorial skiping active directory configuration

          http://blog.ninjatek.co.za/2010/11/proxy-autodetection-using-pac-file-and.html

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • A
            alpharomeo33
            last edited by

            I'm using the recent version 2.0.1

            how do i block facebook in that version?

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              Create a firewall alias with facebook hostnames and/or ip ranges and then apply it on a firewall -> rule on lan interface.

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • T
                tattoomees
                last edited by

                here is screenshot of by Fbook aliases works fine
                and rule on LAN

                fbook.png
                fbook.png_thumb
                fbook1.png
                fbook1.png_thumb

                1 Reply Last reply Reply Quote 0
                • T
                  TyperX
                  last edited by

                  Hai all, blocking https://www.facebook.com is working for me, but how to block only http://apps.facebook.com & https://apps.facebook.com without blocking normal facebook.com ? :)

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    You can try with a proxy server instead of firewall rules but I'm not sure if you can block apps.facebook without blocking facebook at all.

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • G
                      gajanan
                      last edited by

                      @marcelloc:

                      Create a firewall alias with facebook hostnames and/or ip ranges and then apply it on a firewall -> rule on lan interface.

                      Hi,
                      I tried the same in transperent proxy but it is not working for https.

                      thanks in advance

                      1 Reply Last reply Reply Quote 0
                      • G
                        gajanan
                        last edited by

                        @tattoomees:

                        here is screenshot of by Fbook aliases works fine
                        and rule on LAN

                        Hi, I tried the same but it is nor working in transperent proxy.
                        any help..

                        1 Reply Last reply Reply Quote 0
                        • M
                          Metu69salemi
                          last edited by

                          transparent + https isn't going to work. firewall rules with alias and https will do the work

                          1 Reply Last reply Reply Quote 0
                          • C
                            craigduff
                            last edited by

                            IF you want my advice.. I use Squid with Squid Guard to block Facebook and other social media websites. But i understand it can get complicated. A really easy solution is to use opendns.com which is truely amazing with the amount of protection you can get for your network.

                            Kind Regards,
                            Craig

                            1 Reply Last reply Reply Quote 0
                            • marcellocM
                              marcelloc
                              last edited by

                              Here is a small contribution from meioloco on brazilian forum with facebook networks.

                              http://forum.pfsense.org/index.php/topic,51815.msg280137.html#msg280137

                              Treinamentos de Elite: http://sys-squad.com

                              Help a community developer! ;D

                              1 Reply Last reply Reply Quote 0
                              • H
                                hardcore
                                last edited by

                                well guys can you help me please make it work this https://www.facebook.com? cause I cant figure out how to make it work using pfsense 2.03 using last stable squid package, squidguard and lightsquid, my wan and lan and cisco router are on the same range , Cisco does the nat , but also the pfsense has its default nat enabled rules, also I didn't make any firewall rules besides the default automatic ones which allow any lan traffic, wan has no firewall rule, cisco is the gateway for wan interface, and the wan interface is the gateway for the lan interface, also there no static routes in place. . Google https works, my company https works, some other https sites work, but facebook wont work although its allowed on acl list
                                Please help I am  a newbie.
                                when I don't use proxy the facebook page is oki

                                1 Reply Last reply Reply Quote 0
                                • S
                                  srk3461
                                  last edited by

                                  This is what I did to block Facebook.com along with squid-guard. But on the other-hand users can still use ultra-surf or change their dns to either google or any other one and access that stupid site!  >:(

                                  with DNS forwarder enabled! but remember blocking (check the img) this way blocks everyone on the LAN!
                                  successfully working!  ;)

                                  fb.jpg
                                  fb.jpg_thumb

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.