Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to block this *.deploy.akamaitechnologies.com

    pfSense Packages
    6
    10
    23.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      myamout
      last edited by

      Hi guys, was trying to block this domain with no luck… :(
      the prefix to "deploy.akamaitechnologies.com" is dynamic
      tried to block using squidguard and squid, but maybe i missed it. Any advice?

      no whois nor dns entries for this domain!!??

      1 Reply Last reply Reply Quote 0
      • Cry HavokC
        Cry Havok
        last edited by

        Are you forcing people to use Squid? How have you configured SquidGuard to block "*.deploy.akamaitechnologies.com"?

        1 Reply Last reply Reply Quote 0
        • D
          dhatz
          last edited by

          Why would you want to block akamai, if I may ask?

          It's used by many sites http://www.akamai.com/html/customers/customer_list.html

          1 Reply Last reply Reply Quote 0
          • M
            myamout
            last edited by

            Squid is configured as transparent, squid guard is active as well, i'm able to block stuff using them. But the thing is "akamai" has dynamic prefix
            and as dhatz said there's lot of big customers uses it like apple, microsoft etc… i wanted a way to block it by domain, but there's no nslookup for
            blah-blah.deploy.akamaitechnologies.com maybe this is why it's not blocking?

            1 Reply Last reply Reply Quote 0
            • Cry HavokC
              Cry Havok
              last edited by

              Why don't you try providing some more detail, such as exactly what you're trying to block?

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                Yeah could you give an example of this blah-blah.deploy.akamaitechnologies.com

                Because this statement is just not possible
                but there's no nslookup for blah-blah.deploy.akamaitechnologies.com

                If you computer is connecting to something.anything.tld – then it had to have looked it up somewhere!! Just not possible for it be otherwise -- now maybe you connected to an IP and that blah-blah is the PTR for that IP??

                Going to have to give us more to work with.  But if you don't want *.somedomain.tld to work through your proxy that is easy enough to do with wildcards, etc.  blocking whole domain is quite simple.

                If you saying devices are getting through still, then maybe its going by IP and that name your seeing is just the PTR??

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                1 Reply Last reply Reply Quote 0
                • M
                  myamout
                  last edited by

                  problem is i see huge traffic from *.deploy.akamaitechnologies.com (before the wildcard, there's random strings like "a203-111-15-229.deploy.akamaitechnologies.com". If i put "akamaitechnologies.com" domain alone in the Squid–>Access Control-->Blacklist it will still passthrough... i have installed IFTOP and it seems to only show a203-111-15-229.deploy.akamaitechnologies.com and other random prefixes, tried to ping and nslookup but nothing, it's seems to be a PTR, i also saw IP addresses seems to be related to akamaitechnologies (nslookup showed that).
                  if akamaitechnologies uses a lot of random IP addresses and PTRs, how to block that??

                  1 Reply Last reply Reply Quote 0
                  • T
                    Techmaster
                    last edited by

                    Hi…

                    I have blocked this with a software. Whereever with whatever IP no. at its prefix, it finds it blocks deploy.akamaitechnologies.com.

                    and I found that Yahoo (ymail.com) is opening up this *deploy.akamai.....

                    When I auto blocked those site with the software, sometimes Ymail.com does not open in correct format of webpage and sometimes message of Page cannot be found / Diagnose connection message in IE and firefox.

                    I guess, yahoo team may give a correct information regarding this.

                    thanks.

                    1 Reply Last reply Reply Quote 0
                    • T
                      Techmaster
                      last edited by

                      hi,

                      this video may help you…

                      http://www.youtube.com/watch?v=JnS--ivIo8w

                      thanks

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        In squid, insert just

                        .domain.ip.dont.like.com with no *

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.