Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to block Facebook Apps?

    Scheduled Pinned Locked Moved Firewalling
    10 Posts 6 Posters 8.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      marcsantos12211
      last edited by

      Good Day Everyone!

      I need to block facebook apps to aoid network traffic. Can somebody tell me how to?

      Thanks and More Power!

      -marc

      1 Reply Last reply Reply Quote 0
      • F
        fluca1978
        last edited by

        Not sure if this is possible at all.
        In one of my installation I've blocked facebook at all (along with a couple of private surfing sites). This will prevent even the jabber chat to work.

        1 Reply Last reply Reply Quote 0
        • M
          marcsantos12211
          last edited by

          How did you do that sir? I only need to block facebook applications because we do allow students to use facebook but not to play games and other applications that consumes a lot of bandwidth… thanks!

          1 Reply Last reply Reply Quote 0
          • P
            pf123user
            last edited by

            Most of that stuff is going to proxy through FB. I have only worked (very limited) with the compliance end of the spectrum on this (monitoring more than blocking).

            check out socialware.com. They have a lot of educational tutorials and explain how it takes an app (socialware app) to block/monitor other apps.

            Bandwidth is pretty cheap - are you really worried about games that much?

            1 Reply Last reply Reply Quote 0
            • J
              jorgelustosa
              last edited by

              if you use  pfsense 2.0 you can create one alias with dns-name "apps.facebook.com" …

              1 Reply Last reply Reply Quote 0
              • F
                fluca1978
                last edited by

                @marcsantos12211:

                How did you do that sir? I only need to block facebook applications because we do allow students to use facebook but not to play games and other applications that consumes a lot of bandwidth… thanks!

                Not mind I disallow to allow students using facebook…however what I've done here is  to block all facebook addresses in the firewall, so that no connections can be established at all. This of course blocks applications and the facebook itself, that is not what you want.

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  If you block Facebook networks but allow any other site, then users will turn around your rules and use external ssl proxy servers.

                  Google will help them.

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • K
                    kalu
                    last edited by

                    @marcelloc:

                    If you block Facebook networks but allow any other site, then users will turn around your rules and use external ssl proxy servers.

                    Google will help them.

                    so what do you think is a better idea ?
                    thanks
                    kalu

                    i love pfsense because i love open source.

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      It depends on your company rules.

                      You can block everything on lan and force everybody to set a proxy on their browsers.

                      This way, squid + squidguard will block almost sites.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • F
                        fluca1978
                        last edited by

                        @marcelloc:

                        If you block Facebook networks but allow any other site, then users will turn around your rules and use external ssl proxy servers.

                        Google will help them.

                        Yeah, I did not mention that of course I was also blocking anon-proxy sites and letting squid doing the rest.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.