Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SquidGuard: DONT' allow IP addresses except some IP address

    Scheduled Pinned Locked Moved pfSense Packages
    4 Posts 3 Posters 2.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      rocky
      last edited by

      Hello all!

      I am using squidGuard. I checked "Not to allow IP addresses in URL" so the user cannot password pass the firewall using IP in URL.

      A problem is that many programs internally access the web via IP:

      • the file download from Yahoo Mail, Yahoo Instant Messenger
      • the auto-update progress of Nod32 (antivirus-software)
      • and some others

      Is there anyway for this type of Guard (Block all IP access except some special IPs) ?

      Thank you for reading and replies!

      1 Reply Last reply Reply Quote 0
      • M
        Monoecus
        last edited by

        You would have to know those internal IPs. In this case it would be possible to block them. On the other hand, I am not sure if you really need this. Why not just blocking the domain of yahoo mail entirely?

        1 Reply Last reply Reply Quote 0
        • R
          rocky
          last edited by

          Thank you for replies.

          The ip of yahoo download server varies from place to place and have the form:

          http://<ip>/some-links-to-yahoo-file-server

          This address is generated when users download file from their email

          I want that user cannot enter some porn sites by type IP address of the site in address bar. I choose this option from squidGuard Option. Then now user cannot download file/receive file via yahoo mail / Yim. ==> this is my problem!

          Thank you again!</ip>

          1 Reply Last reply Reply Quote 0
          • D
            dvserg
            last edited by

            @rocky:

            Thank you for replies.

            The ip of yahoo download server varies from place to place and have the form:

            http://<ip>/some-links-to-yahoo-file-server

            This address is generated when users download file from their email

            I want that user cannot enter some porn sites by type IP address of the site in address bar. I choose this option from squidGuard Option. Then now user cannot download file/receive file via yahoo mail / Yim. ==> this is my problem!

            Thank you again!</ip>

            Test this: create custom destination "my_vip_sites" and add yahoo mail DOMAIN and other sites what you want (& save). And select in ACL (or Default) this Destination as 'white'.

            SquidGuardDoc EN  RU Tutorial
            Localization ru_PFSense

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.