How do I block Facebook with Squid?
-
Hi!
I have a problem, I've made Facebook blocking instructions but it does not work.. How can I block a Facebook page using Squid or another program?
-
Snort and openappid rules may do it.
if you want to just block facebook create 3 custom rules that read :-
alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"facebook_apps";flow:from_client;appid:facebook_apps; sid:70101 ; classtype:misc-activity; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"facebook";flow:from_client;appid:facebook; sid:70439 ; classtype:misc-activity; rev:1;)
alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"facebook_like";flow:from_client;appid:facebook_like; sid:72794 ; classtype:misc-activity; rev:1;)
Just tried it with those 3 rules, its blocking from a web browser but not the mobile app, maybe a few more rules needed.