Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Blocking Internet access via specific browser

    Scheduled Pinned Locked Moved General pfSense Questions
    26 Posts 6 Posters 8.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      @KOM:

      How is Opera getting around the firewall?  Just because an IP checker comes up with a different value??

      It does not use the DHCP assigned DNS server, and it does not use the DHCP assigned proxy either. Kinda obvious when you Google it.

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        Kinda obvious when you Google it.

        Why should I waste my precious time typing like a sucker when I've got people like you to keep me informed?  ;D

        1 Reply Last reply Reply Quote 0
        • N
          networkinggeek
          last edited by

          @stephenw10:

          I'm unsure what you're asking here. Do you want to block all access from opera-mini? Or just the sites blocked for other browsers?
          Since Opera mini is not the exclusive browser on any device (as far as I know) blocking it completely may be acceptable for you.

          Steve

          I believe blocking Opera Mini is part of the solution, their might be many other browsers which work in similar way.

          "Mastery isn't a natural gift. Its a daily devotion"

          1 Reply Last reply Reply Quote 0
          • N
            networkinggeek
            last edited by

            @KOM:

            Definitely block 80 and 443 on LAN.  Force everything to use the proxy or else they don't get to talk.

            Thanks for the article.  I now see that the main purpose of their proxy is to lower the bandwidth required, which may or may not speed up browsing but should lower bandwidth used on mobile.

            Sir I am little confused here, blocking port 80/443 with anti-lockout rule disabled or with anti-lockout rule enabled?  :-\

            "Mastery isn't a natural gift. Its a daily devotion"

            1 Reply Last reply Reply Quote 0
            • KOMK
              KOM
              last edited by

              blocking port 80/443 with anti-lockout rule disabled or with anti-lockout rule enabled?

              Keep the anti-lockout rule enabled and put the blocks below it.

              1 Reply Last reply Reply Quote 0
              • N
                networkinggeek
                last edited by

                @KOM:

                blocking port 80/443 with anti-lockout rule disabled or with anti-lockout rule enabled?

                Keep the anti-lockout rule enabled and put the blocks below it.

                It is still managing to pass the firewall.
                I have attached the screenshots of the rules I have entered, kindly let me know if I have erred in the rules.

                After the blocking of port 80/443 I have added IP of our DNS server and blocked rest of them in the next rule.

                I have configured NAT or you can say I am Port forwarding the traffic to 3128(HTTP) and 3129(HTTPS)

                ![NAT rules.png](/public/imported_attachments/1/NAT rules.png)
                ![NAT rules.png_thumb](/public/imported_attachments/1/NAT rules.png_thumb)
                ![LAN rules.png](/public/imported_attachments/1/LAN rules.png)
                ![LAN rules.png_thumb](/public/imported_attachments/1/LAN rules.png_thumb)

                "Mastery isn't a natural gift. Its a daily devotion"

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.