[TUTORIAL] bloqueando https facebook / youtube

reinaldo.feitosa

Olá, não entendi o motivo de bloquear o Facebook e Youtube via Firewall.
Eu faço o bloqueio via Proxy normalmente.

Seria o fato de o proxy estar em modo transparente?

E no caso de dispositivos móveis, como faz?

persaud

deve acessar o site http://bgp.he.net/search?search%5Bsearch%5D=facebook&commit=Search
então pega todos os ips importa pro alias e faz o procedimento mencionado ai em cima, se nao der certo, faz o teste de ping pro face, e ve se o ip que aparece esta na lista, se nao tiver, adiciona. e salva e aplica e pronto

BBcan177

https://forum.pfsense.org/index.php?topic=86212.msg513676#msg513676

Você pode usar um serviço como o Hurricane Electric para recolher IPs para nomes de domínio que estão a mudar com mais freqüência e coletar a lista com o formato "html" em pfBlockerNG .

You can use a service like Hurricane Electric to collect IPs for Domain names that are changing more frequently and collect the list with the "html" format in pfBlockerNG.

http://bgp.he.net/search?search%5Bsearch%5D=twitter&commit=Search
http://bgp.he.net/search?search%5Bsearch%5D=facebook&commit=Search
http://bgp.he.net/search?search%5Bsearch%5D=spotify&commit=Search
http://bgp.he.net/search?search%5Bsearch%5D=dropbox&commit=Search

tiago.oliveira

Boa tarde a todos,

Esse tipo de bloqueio (Por IP) creio que só irá funcionar para o Facebook, porém, para o Youtube não será possível, pois o mesmo utiliza vários Ips do Youtube também para o gmail…googledriver. Ainda estou na luta.

tomaswaldow

@tiago.oliveira:

Boa tarde a todos,

Esse tipo de bloqueio (Por IP) creio que só irá funcionar para o Facebook, porém, para o Youtube não será possível, pois o mesmo utiliza vários Ips do Youtube também para o gmail…googledriver. Ainda estou na luta.

Não usa proxy?

cleio

Pessoal, o site http://bgp.he.net/ está fora faz uns dias, alguém pode indicar outro site que faça a mesma coisa?

ericpa

está fora apenas aqui no brasil, voce consegue entrar no "http://bgp.he.net/search?" utilizando um site proxy como esse:
http://www.ipv6proxy.net/go.php?u=http%3A%2F%2Fbgp.he.net&b=0&f=norefer
ou até mesmo utilizando o ultrasurf ou a rede TOR

Rafael Pfsense

Aos administradores deste Topico.

Me ajudou 100%.

Utilizando o bloquei por Alias. Bom seria se pudesse criar um schedulle e liberar a mesma por um determinado horario semelhante ao TIME do squidguard.

Falcrow

Pessoal eu so consegui bloquear o Facebook por http ou https usando estes dados para bloquear, pesquisa dos hosts

http://bgp.he.net/search?search%5Bsearch%5D=star.c10r.facebook.com&commit=Search pesquisei por star.c10r.facebook.com e encontrei este link através do DNS Lookup do Pfsense procurando pelas respostas através do facebook.com .


AS9427
AS8484
AS7812
AS6924
AS6656
AS63944
AS6390
AS63665
AS63293
AS62813
AS61811
AS61247
AS60614
AS57703
AS57416
AS57180
AS57013
AS56923
AS56886
AS56383
AS54925
AS54115
AS53092
AS52093
AS50819
AS5059
AS50557
AS50495
AS5034
AS48658
AS47461
AS46972
AS46849
AS44718
AS4449
AS42523
AS41863
AS40330
AS39673
AS39577
AS39464
AS393558
AS393386
AS38831
AS38571
AS38020
AS3500
AS33902
AS32934
AS32918
AS32869
AS32845
AS29158
AS28030
AS27652
AS27645
AS27004
AS264455
AS263849
AS263120
AS262323
AS25155
AS23767
AS23338
AS201883
AS201852
AS201398
AS19961
AS19927
AS198504
AS198437
AS198394
AS198381
AS198247
AS197363
AS18196
AS18006
AS15153
AS13637
AS133846
AS132971
AS132592
AS10400
97.75.253.0/24
97.75.246.0/24
96.47.246.0/23
96.47.244.0/23
96.47.244.0/22
95.177.176.0/21
94.177.60.0/22
94.176.4.0/24
94.102.80.0/20
93.120.124.0/22
93.119.152.0/22
91.234.188.0/24
91.234.168.0/23
91.220.97.0/24
91.209.233.0/24
91.198.107.0/24
91.196.44.0/22
89.43.120.0/21
89.40.176.0/22
89.37.188.0/22
89.34.216.0/23
89.206.128.0/17
87.76.56.0/21
87.76.48.0/21
87.76.40.0/21
87.76.36.0/22
87.76.34.0/23
87.76.33.0/24
87.76.32.0/24
84.239.40.0/21
84.239.32.0/21
83.146.127.0/24
81.200.112.0/20
81.171.128.0/17
8.14.84.0/22
79.141.232.0/21
79.141.224.0/21
79.141.224.0/20
77.36.40.0/21
77.36.32.0/21
76.8.96.0/20
74.85.246.0/24
74.85.230.0/24
74.85.224.0/20
74.85.224.0/19
74.120.207.0/24
74.120.206.0/24
74.120.205.0/24
74.120.204.0/24
74.120.203.0/24
74.120.202.0/24
74.120.201.0/24
74.120.200.0/24
74.119.76.0/22
72.14.82.0/24
72.14.81.0/24
72.14.80.0/24
72.14.79.0/24
69.63.184.0/21
69.63.176.0/21
69.63.176.0/20
69.41.18.0/24
69.41.17.0/24
69.171.255.0/24
69.171.240.0/20
69.171.239.0/24
69.171.224.0/20
69.171.224.0/19
66.79.175.0/24
66.79.160.0/19
66.220.152.0/21
66.220.144.0/21
66.220.144.0/20
66.207.224.0/19
66.206.80.0/20
65.120.0.0/21
65.119.48.0/22
65.116.14.0/23
64.186.54.0/24
64.141.133.0/24
62.231.128.0/19
62.173.64.0/18
46.243.244.0/24
46.183.224.0/21
45.64.40.0/22
45.115.99.0/24
45.115.98.0/24
45.115.97.0/24
45.115.96.0/24
42.160.0.0/13
42.140.192.0/19
42.140.128.0/18
42.128.0.0/12
37.49.229.0/24
37.49.228.0/24
37.49.225.0/24
31.13.96.0/19
31.13.95.0/24
31.13.93.0/24
31.13.91.0/24
31.13.90.0/24
31.13.87.0/24
31.13.86.0/24
31.13.85.0/24
31.13.84.0/24
31.13.83.0/24
31.13.82.0/24
31.13.81.0/24
31.13.80.0/24
31.13.79.0/24
31.13.77.0/24
31.13.76.0/24
31.13.75.0/24
31.13.74.0/24
31.13.73.0/24
31.13.72.0/24
31.13.71.0/24
31.13.70.0/24
31.13.69.0/24
31.13.66.0/24
31.13.65.0/24
31.13.64.0/24
31.13.64.0/19
31.13.64.0/18
31.13.24.0/21
2a03:2880:ffff::/48
2a03:2880:fffe::/48
2a03:2880:f022::/48
2a03:2880:f021::/48
2a03:2880:f01f::/48
2a03:2880:f01c::/48
2a03:2880:f01b::/48
2a03:2880:f01a::/48
2a03:2880:f019::/48
2a03:2880:f016::/48
2a03:2880:f013::/48
2a03:2880:f012::/48
2a03:2880:f011::/48
2a03:2880:f00f::/48
2a03:2880:f00e::/48
2a03:2880:f00d::/48
2a03:2880:f00c::/48
2a03:2880:f00b::/48
2a03:2880:f00a::/48
2a03:2880:f009::/48
2a03:2880:f008::/48
2a03:2880:f007::/48
2a03:2880:f006::/48
2a03:2880:f005::/48
2a03:2880:f004::/48
2a03:2880:f003::/48
2a03:2880:f002::/48
2a03:2880:f001::/48
2a03:2880:f000::/48
2a03:2880::/36
2a03:2880::/32
2a03:2880:4000::/36
2a03:2880:3000::/36
2a03:2880:2000::/36
2a03:2880:1000::/36
2a03:1c20::/36
2a00:0ed0::/32
27.109.116.0/22
2620:010d:c0f0::/44
2620:010d:c0e0::/44
2620:010d:c0d0::/44
2620:010d:c0c0::/44
2620:010d:c0c0::/43
2620:010d:c0a6:1200::/56
2620:010d:c0a6:1100::/56
2620:010d:c0a6:1000::/56
2620:010d:c0a5:1100::/56
2620:010d:c0a5:1000::/56
2620:010d:c0a4:1300::/56
2620:010d:c0a4:1200::/56
2620:010d:c0a4:1100::/56
2620:010d:c0a4:1000::/56
2620:010d:c0a3:1000::/56
2620:010d:c0a2:1200::/56
2620:010d:c0a2:1100::/56
2620:010d:c0a2:1000::/56
2620:010d:c0a1::/52
2620:010d:c0a1:1000::/56
2620:010d:c0a0::/44
2620:010d:c0a0::/43
2620:010d:c090::/44
2620:010d:c084:1300::/56
2620:010d:c084:1200::/56
2620:010d:c084:1000::/56
2620:010d:c083:1300::/56
2620:010d:c083:1100::/56
2620:010d:c083:1000::/56
2620:010d:c082:1900::/56
2620:010d:c082:1800::/56
2620:010d:c082:1600::/56
2620:010d:c082:1500::/56
2620:010d:c082:1300::/56
2620:010d:c082:1200::/56
2620:010d:c082:1100::/56
2620:010d:c082:1000::/56
2620:010d:c081::/52
2620:010d:c081:1000::/56
2620:010d:c080::/44
2620:010d:c080::/43
2620:010d:c080::/41
2620:0000:1cff::/48
2620:0000:1c00::/40
2607:f650::/32
2605:0300::/32
2402:8f00::/33
2402:8f00:8080::/42
2402:8f00:8000::/41
222.27.130.0/24
217.172.24.0/21
217.172.16.0/21
217.172.16.0/20
216.7.252.0/22
216.7.224.0/22
216.251.192.0/20
216.238.151.0/24
216.238.150.0/24
216.207.56.0/24
212.125.64.0/19
208.77.40.0/21
206.104.174.0/24
206.104.173.0/24
206.104.172.0/24
205.214.96.0/19
205.214.128.0/19
205.209.134.0/24
205.209.129.0/24
205.209.128.0/18
204.16.192.0/21
204.15.20.0/22
204.13.64.0/21
203.7.227.0/24
203.31.40.0/24
203.171.5.0/24
203.14.128.0/20
202.6.243.0/24
202.6.242.0/24
202.6.241.0/24
202.6.240.0/24
202.15.32.0/21
201.71.96.0/20
201.71.80.0/20
201.71.64.0/20
201.71.64.0/18
201.71.120.0/21
201.71.118.0/23
201.71.112.0/22
201.158.60.0/22
200.37.94.0/24
200.37.73.0/24
200.37.72.0/24
200.37.191.0/24
200.37.190.0/24
200.37.178.0/24
200.37.170.0/24
200.37.127.0/24
200.37.126.0/24
200.37.125.0/24
200.37.124.0/24
200.37.123.0/24
200.37.122.0/24
200.37.112.0/24
200.146.176.0/20
200.146.160.0/20
200.146.144.0/20
200.146.128.0/20
199.231.72.0/22
199.201.67.0/24
199.201.66.0/24
199.201.64.0/24
199.201.64.0/22
198.202.235.0/24
195.74.71.0/24
195.242.174.0/24
195.216.0.0/19
194.56.234.0/24
194.1.169.0/24
193.93.140.0/22
193.84.185.0/24
193.42.2.0/23
193.34.16.0/22
193.178.190.0/24
193.150.65.0/24
193.105.110.0/24
192.206.148.0/22
192.206.146.0/23
192.206.144.0/23
192.197.89.0/24
192.161.135.0/24
192.161.134.0/24
192.161.133.0/24
192.161.132.0/24
192.161.132.0/22
192.129.76.0/24
190.113.115.0/24
188.224.246.0/24
185.77.64.0/22
185.65.188.0/23
185.62.32.0/22
185.62.184.0/22
185.54.44.0/22
177.92.150.0/24
177.92.149.0/24
177.92.148.0/24
177.92.147.0/24
177.92.146.0/24
177.92.144.0/24
177.92.144.0/21
177.107.98.0/23
177.107.96.0/23
177.107.96.0/21
177.107.96.0/20
177.107.110.0/23
177.107.108.0/23
177.107.108.0/22
177.107.107.0/24
177.107.106.0/23
177.107.104.0/23
177.107.104.0/22
177.107.104.0/21
177.107.100.0/22
176.52.208.0/21
175.64.0.0/11
175.51.64.0/19
175.51.48.0/20
175.51.40.0/21
175.51.32.0/21
175.51.192.0/21
175.51.160.0/20
175.51.128.0/21
175.51.128.0/17
175.51.0.0/19
175.51.0.0/17
175.50.96.0/20
175.50.96.0/19
175.50.80.0/20
175.50.8.0/21
175.50.64.0/20
175.50.56.0/21
175.50.48.0/21
175.50.48.0/20
175.50.40.0/21
175.50.32.0/21
175.50.240.0/20
175.50.224.0/20
175.50.224.0/19
175.50.216.0/21
175.50.212.0/22
175.50.200.0/21
175.50.192.0/21
175.50.192.0/20
175.50.176.0/20
175.50.160.0/20
175.50.160.0/19
175.50.144.0/20
175.50.128.0/20
175.50.128.0/19
175.50.112.0/20
175.50.0.0/21
175.50.0.0/19
175.50.0.0/16
175.49.64.0/18
175.49.192.0/19
175.49.192.0/18
175.49.128.0/18
175.49.0.0/19
175.49.0.0/18
175.49.0.0/16
175.48.96.0/19
175.48.64.0/19
175.48.32.0/19
175.48.224.0/19
175.48.192.0/19
175.48.160.0/19
175.48.128.0/19
175.48.0.0/19
175.48.0.0/16
175.48.0.0/12
173.252.96.0/19
173.252.64.0/19
171.25.236.0/22
162.248.130.0/24
162.248.129.0/24
157.240.191.0/24
157.240.190.0/24
157.240.189.0/24
154.72.70.0/23
154.72.68.0/23
154.72.64.0/22
138.185.48.0/23
138.185.48.0/22
138.185.203.0/24
138.185.202.0/24
138.185.201.0/24
138.185.200.0/24
138.185.200.0/22
132.148.0.0/16
131.100.58.0/23
131.100.56.0/23
130.193.80.0/20
125.22.60.0/24
125.18.120.0/24
12.9.242.0/24
12.236.156.0/24
12.180.59.0/24
12.180.56.0/23
12.180.55.0/24
12.180.54.0/23
12.180.49.0/24
12.180.48.0/24
12.180.48.0/23
12.155.34.0/24
12.13.43.0/24
12.13.42.0/24
12.13.41.0/24
12.13.40.0/21
12.111.189.0/24
116.68.247.0/24
116.68.246.0/24
116.68.245.0/24
116.68.244.0/24
116.68.243.0/24
116.68.242.0/24
116.68.241.0/24
116.68.240.0/24
116.57.232.0/23
114.134.184.0/21
111.92.240.0/22
111.91.231.0/24
111.91.230.0/24
111.91.229.0/24
111.91.228.0/24
111.91.227.0/24
111.91.226.0/24
111.91.225.0/24
111.91.224.0/24
111.155.208.0/21
111.155.192.0/20
111.155.160.0/20
111.155.144.0/20
111.155.128.0/17
111.155.0.0/19
111.155.0.0/17
111.155.0.0/16
111.151.96.0/21
111.151.88.0/21
111.151.80.0/21
111.151.8.0/21
111.151.72.0/21
111.151.64.0/21
111.151.56.0/21
111.151.48.0/21
111.151.40.0/21
111.151.32.0/21
111.151.248.0/21
111.151.240.0/21
111.151.24.0/21
111.151.232.0/21
111.151.224.0/21
111.151.216.0/21
111.151.208.0/21
111.151.200.0/21
111.151.192.0/21
111.151.184.0/21
111.151.176.0/21
111.151.168.0/21
111.151.160.0/21
111.151.16.0/21
111.151.152.0/21
111.151.144.0/21
111.151.136.0/21
111.151.128.0/21
111.151.120.0/21
111.151.112.0/21
111.151.104.0/21
111.151.0.0/21
111.151.0.0/16
111.150.128.0/17
111.150.0.0/17
111.150.0.0/16
111.149.128.0/17
111.149.0.0/17
111.149.0.0/16
111.148.96.0/19
111.148.88.0/21
111.148.80.0/21
111.148.8.0/21
111.148.72.0/21
111.148.64.0/21
111.148.56.0/21
111.148.48.0/21
111.148.40.0/21
111.148.32.0/21
111.148.24.0/21
111.148.16.0/21
111.148.128.0/17
111.148.0.0/21
111.148.0.0/16
111.147.96.0/19
111.147.64.0/19
111.147.64.0/18
111.147.32.0/19
111.147.224.0/19
111.147.192.0/19
111.147.192.0/18
111.147.160.0/19
111.147.128.0/19
111.147.128.0/18
111.147.0.0/18
111.147.0.0/16
111.146.96.0/19
111.146.64.0/19
111.146.64.0/18
111.146.32.0/19
111.146.224.0/19
111.146.192.0/19
111.146.192.0/18
111.146.160.0/19
111.146.128.0/19
111.146.128.0/18
111.146.0.0/18
111.146.0.0/16
111.145.96.0/19
111.145.64.0/19
111.145.64.0/18
111.145.32.0/19
111.145.224.0/19
111.145.192.0/19
111.145.192.0/18
111.145.160.0/19
111.145.128.0/19
111.145.128.0/18
111.145.0.0/19
111.145.0.0/18
111.145.0.0/16
111.144.96.0/19
111.144.64.0/19
111.144.64.0/18
111.144.32.0/19
111.144.224.0/19
111.144.192.0/19
111.144.192.0/18
111.144.160.0/19
111.144.128.0/19
111.144.128.0/18
111.144.0.0/19
111.144.0.0/18
111.144.0.0/16
111.143.96.0/19
111.143.64.0/19
111.143.64.0/18
111.143.32.0/19
111.143.224.0/19
111.143.192.0/19
111.143.192.0/18
111.143.160.0/19
111.143.128.0/19
111.143.128.0/18
111.143.0.0/19
111.143.0.0/18
111.143.0.0/16
111.142.96.0/19
111.142.64.0/19
111.142.64.0/18
111.142.32.0/19
111.142.224.0/19
111.142.192.0/19
111.142.192.0/18
111.142.160.0/19
111.142.128.0/19
111.142.128.0/18
111.142.0.0/19
111.142.0.0/18
111.142.0.0/16
111.141.0.0/16
111.140.96.0/19
111.140.64.0/19
111.140.32.0/19
111.140.192.0/19
111.140.160.0/19
111.140.128.0/19
111.140.128.0/17
111.140.0.0/19
111.140.0.0/17
111.140.0.0/16
111.137.96.0/22
111.137.92.0/22
111.137.88.0/22
111.137.84.0/22
111.137.80.0/22
111.137.64.0/20
111.137.56.0/21
111.137.52.0/22
111.137.48.0/22
111.137.44.0/22
111.137.40.0/22
111.137.36.0/22
111.137.32.0/22
111.137.232.0/22
111.137.228.0/22
111.137.224.0/22
111.137.192.0/19
111.137.128.0/18
111.137.120.0/21
111.137.112.0/21
111.137.108.0/22
111.137.104.0/22
111.137.100.0/22
111.137.0.0/22
111.137.0.0/16
111.136.96.0/19
111.136.64.0/19
111.136.32.0/19
111.136.224.0/19
111.136.192.0/19
111.136.160.0/19
111.136.128.0/19
111.136.0.0/19
111.132.64.0/18
111.132.192.0/18
111.132.128.0/18
111.132.128.0/17
111.132.0.0/18
111.132.0.0/17
111.132.0.0/16
111.128.96.0/19
111.128.64.0/19
111.128.64.0/18
111.128.32.0/19
111.128.224.0/19
111.128.192.0/18
111.128.0.0/19
111.128.0.0/18
111.128.0.0/16
111.128.0.0/11
110.56.0.0/16
110.56.0.0/13
109.234.163.0/24
109.166.48.0/21
104.192.111.0/24
103.52.236.0/22
103.37.196.0/23
103.37.196.0/22
103.31.131.0/24
103.31.130.0/24
103.31.129.0/24
103.31.128.0/24
103.31.128.0/22
103.255.115.0/24
103.255.107.0/24
103.255.105.0/24
103.255.104.0/22
103.233.183.0/24
103.23.132.0/22
103.1.83.0/24
103.1.82.0/24
103.1.81.0/24
103.1.80.0/24
103.1.30.0/23
103.1.28.0/23
103.1.28.0/22

Falcrow

Apesar de ter conseguido o facebook, o youtube eu não consigo sem bloquear tbm os demais serviços google

reinaldo.feitosa

@Rafael:

Aos administradores deste Topico.

Me ajudou 100%.

Utilizando o bloquei por Alias. Bom seria se pudesse criar um schedulle e liberar a mesma por um determinado horario semelhante ao TIME do squidguard.

Sim, é possível utilizando Firewall - Agendas
Crie um agenda com os horários e depois faz uma regra relacionando com esta agenda

jonatanfs

Funcionou muito bem aqui.

Estou usando proxy transparente…
Facebook 100 % bloqueiado

andersonpow

Resolvi e fiz este video espero que ajude.
https://www.youtube.com/watch?v=Za-MpesndWU

rronaldo

@Mr:

Pesquisei e não achei por aqui fazer um breve tutorial como bloquear Facebook e Youtube via https / http
Lembrando que isso serve para qualquer site.

1° vamos pega a listas dos host
Youtube
208.65.152.0/22
213.146.171.0/24
208.117.224.0/15
64.15.114.0/24
64.15.120.0/24
64.15.125.0/24
82.129.37.0/24
74.125.234.0/24
108.59.8.0/24
208.43.0.0/16
63.131.144.0/24
107.20.132.0/24
23.33.186.0/24
64.208.138.0/24
54.225.188.0/24
54.243.58.0/24
Facebook
31.13.24.0/21
31.13.64.0/19
31.13.64.0/24
31.13.69.0/24
31.13.70.0/24
31.13.71.0/24
31.13.72.0/24
31.13.73.0/24
31.13.75.0/24
31.13.76.0/24
31.13.77.0/24
31.13.78.0/24
31.13.79.0/24
31.13.80.0/24
66.220.144.0/20
66.220.144.0/21
66.220.149.11/16
66.220.152.0/21
66.220.158.11/16
66.220.159.0/24
69.63.176.0/21
69.63.176.0/24
69.63.184.0/21
69.171.224.0/19
69.171.224.0/20
69.171.224.37/16
69.171.229.11/16
69.171.239.0/24
69.171.240.0/20
69.171.242.11/16
69.171.255.0/24
74.119.76.0/22
173.252.64.0/19
173.252.70.0/24
173.252.96.0/19
204.15.20.0/22
2°- Acessa o pfSense

3°- Acessa guia Firewall -> Aliases

4°- Clicamos em bulk import aliases from list

5°- Preenchendo os dados do Aliases Bulk Import
Alias Name: Nome da alias
Description: Descrição
Aliases to import: IP host

6º-Acesse guia Firewall -> Rules -> Lan

7°- Add new host

8°- Edite os dados como na imagem abaixo, mande salvar

9°- Logo em seguida mande aplicar e teste.

Obs: Fiz e testei e funcionou caso esteja errado por favor corrigir.
Usei o proxy no navegadores

Com o facebook vai até funcionar, mas com o google vai bloquear todos os outros serviços gmail, drive, fotos, maps…

diegoqueiroz

Eu não recomendaria bloquear esses sites via IP. Eles usam RoundRobin DNS e é muito difícil determinar o endereço que usam, sem falar que esse bloqueio pode afetar outros serviços.

O melhor é o bloqueio rolar em uma camada superior, normalmente associado a um serviço de Proxy como o Squid.

tomaswaldow

+1