LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 06-18-2007, 06:48 AM   #1
venki
Member
 
Registered: Sep 2006
Location: India
Distribution: suse10.2
Posts: 128

Rep: Reputation: 15
help in blocking https


HI all,
Please help me,i am trying to block https from 2 days still there is no use.
what to do in squid.conf? http is blocking correctly.I am using IPCOP

plz help me
thks and regards
______________
 
Old 06-18-2007, 12:50 PM   #2
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
did you remove port 443 from your ACLs?? is the squid box doing any SNAT??
 
Old 06-26-2007, 01:21 AM   #3
venki
Member
 
Registered: Sep 2006
Location: India
Distribution: suse10.2
Posts: 128

Original Poster
Rep: Reputation: 15
hi,
i don't want to block all https sites only few sites.
 
Old 06-26-2007, 04:05 AM   #4
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
Quote:
Originally Posted by venki
i don't want to block all https sites only few sites.
It would go something like this:
Code:
acl https_port port 443
acl bad_https_sites dstdomain .microsoft.com
acl bad_https_sites dstdomain .cnn.com
acl bad_https_sites dstdomain .google.com
http_access deny https_port bad_https_sites
With this example, you should be able to use these (and any others):

http://www.microsoft.com/
http://www.cnn.com/
http://www.google.com/

But these should generate an Access Denied:

https://www.microsoft.com/
https://www.cnn.com/
https://www.google.com/

Last edited by win32sux; 06-26-2007 at 04:09 AM.
 
Old 06-28-2007, 01:26 AM   #5
venki
Member
 
Registered: Sep 2006
Location: India
Distribution: suse10.2
Posts: 128

Original Poster
Rep: Reputation: 15
hi win32sux,

i have put ur script in squid.conf file...still there is no use!
microsoft cnn every thing is coming!
help me
 
Old 06-28-2007, 02:44 AM   #6
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
Quote:
Originally Posted by venki
hi win32sux,

i have put ur script in squid.conf file...still there is no use!
microsoft cnn every thing is coming!
help me
Actually, I tested it before posting it and I confirmed it worked well, meaning it did what I thought you wanted (to block an HTTPS site without blocking its HTTP counterpart). There might be something wrong somewhere else in your squid.conf, can you post it? Use a command like this to strip comments and spaces:
Code:
cat /etc/squid/squid.conf | grep -v ^# | grep -v ^$
Also, make sure you reconfigure Squid after you make changes to the conf file.
Code:
squid -k reconfigure

Last edited by win32sux; 06-28-2007 at 03:42 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Https renaissance Linux - Software 1 04-16-2006 01:29 AM
https:// wwnexc Linux - Software 3 11-05-2005 11:57 PM
https Ammad Linux - Networking 3 04-20-2005 04:22 AM
https? rocketgo Linux - General 1 11-12-2003 08:22 PM
https??? pk21 Linux - General 5 11-28-2002 11:01 AM


All times are GMT -5. The time now is 10:12 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration