Best way block facebook on https (port 443)

asankaj2006

I have implemented squid server and squid filter successfully on pfsense 2.0.1.
One of the intentions behind implementation of squid proxy is to block facebook.
I manage to block facebook that is running with (http) port 80, but its possible access facebook using (https) port 443 .
Can some please advise me best possible way to block facebook on hhtps.

Cheers
Asanka

podilarius

haven't tried it but in the ACL black list try

.*facebook.com:80

It might work.

marcelloc

@asankaj2006:

Can some please advise me best possible way to block facebook on hhtps.

Are you using squid in transparente mode?

dhatz

You can't do https filtering with Squid in transparent mode, you need to configure your clients to use it.

asankaj2006

Yes I am using squid in transparente mode.

podilarius

@dhatz:

You can't do https filtering with Squid in transparent mode, you need to configure your clients to use it.

That is true … so I just added:

.*facebook.com

to the black list. I was blocked on port 80, but I was still allowed to access facebook on https.

josekym

You have to block using firewall rules. We do block 443/HTTPS traffic to Facebook CIDR networks during regular office hours.

For us, we block the following destination CIDR networks:

69.63.176.0/20
69.171.224.0/19
63.135.80.0/20
66.220.144.0/20
65.201.208.24/29
65.204.104.128/28
74.119.76.0/22
204.15.20.0/22
173.252.64.0/18
96.16.0.0/15