PfSense 2.1 & Squid

[SovietRussia]

Hi all, having a bit of trouble here.

Trying to ban iPlayer…

If i put in the blacklist

http://www.bbc.co.uk/iplayer/

It still gets through, i have tried everything. Regular expressions for the word iplayer, blocking http://www.bbc.co.uk/iplayer/config/ and they all just seem to bypass Squid and get through.

Any ideas?

Thanks
SR

[grievsa93]

Hi SR,

Someone may correct me but i believe squid only really blocks port 80. Anything else will pass.

BBC iPlayer uses a p2p applicaion called Kontiki. And i believe Konitiki uses the following ports:

80 (http)
443 (https)
1947
1948
4000
5000
8888
Ports 80 and 4

So you may need to do some more configuration.

[grievsa93]

I just tested iplayer on my netowkr and its blocked.

I use squidguard on top of squid and use this site for my blacklists
http://www.shallalist.de/

[NetWiz]

grievsa93, which filter of squidguard have you applied?

[grievsa93]

Hi netwiz,

iplayer is being blocked in the 'movies' group

This site has been classed as non work related. If this is an error, please contact IT.: 403 Forbidden

Reason:
Client address: xxx.xxx.xxx.xxx
Client group: default
Target group: blk_BL_movies
URL: http://www.bbc.co.uk/iplayer/

If you didn't want to block all movie sites, you could always make at target category of blacklist sites and then enforce your own :)

I get my blacklists from http://www.shallalist.de/

Cheers,

grievsa93