How do I block Facebook with Squid?



  • Hi!
    I have a problem, I've made Facebook blocking instructions but it does not work.. How can I block a Facebook page using Squid or another program?


  • Galactic Empire

    Snort and openappid rules may do it.

    if you want to just block facebook create 3 custom rules that read :-

    alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"facebook_apps";flow:from_client;appid:facebook_apps; sid:70101 ; classtype:misc-activity; rev:1;)

    alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"facebook";flow:from_client;appid:facebook; sid:70439 ; classtype:misc-activity; rev:1;)

    alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"facebook_like";flow:from_client;appid:facebook_like; sid:72794 ; classtype:misc-activity; rev:1;)

    Just tried it with those 3 rules, its blocking from a web browser but not the mobile app, maybe a few more rules needed.



Log in to reply