Allow only Gmail.com
-
Hi all,
I need to block all the HTTP/HPPTS websites (except for Gmail.com). What is my configuration ?Many thanks!
-
Please search the forum - this has been discussed many times already.
As a hint, you'll need to block all outbound ports by default (particularly 80 and 443) and use a proxy server.
-
Any idea without use proxy server and filter ? I used Rules for a block http/https. And Aliases for a accept Gmail. But not worked. Also I need a update from kaspersky.com. Sorry for my bad english.
-
Do you have allow rule before deny rule?
-
Created aliases and rules. See the attachments.
-
modify your rule.
Remove source port definition, that should do it
-
I modified, but also can't go out to my aliases sites.
-
The method I'd use, which is also the one recommended by Google for users of Gmail and GoogleApps, would be to white-list Google's IPv4 blocks (and maintaining those with a script). It is described in a pfsense feature request I filed a year ago: http://redmine.pfsense.org/issues/1901
For details you can read Google's "Networking Best Practices for Large Deployments"