Blocking Https in Smoothwall with exceptions

jonhill90 · 03-05-2009, 02:13 PM

Hey, I have blocked all Outgoing Https access, but now i cannot access sites i want to access. I blocked https because students in the classroom were using proxy tunnels to get through. But now they cannot access there mail accounts with are protect by ssl. Is there a way to block all https with exceptions?

Please Help Me.

Also i am using Smoothwall 3.0

anomie · 03-05-2009, 04:55 PM

I'm not familiar with the ins and outs of Smoothwall, but a common approach to managing web access is with a http/s proxy -- e.g. Squid.

win32sux · 03-05-2009, 06:17 PM

Quote:

Originally Posted by jonhill90

Hey, I have blocked all Outgoing Https access, but now i cannot access sites i want to access. I blocked https because students in the classroom were using proxy tunnels to get through. But now they cannot access there mail accounts with are protect by ssl. Is there a way to block all https with exceptions?

Please Help Me.

Also i am using Smoothwall 3.0

Quote:

Originally Posted by anomie

I'm not familiar with the ins and outs of Smoothwall, but a common approach to managing web access is with a http/s proxy -- e.g. Squid.

Yeah, in Squid you would basically create an ACL for sites you wish to allow the CONNECT method on. Example:

Code:

acl CONNECT method CONNECT
acl allowed_https_sites dstdomain .google.com
acl allowed_https_sites dstdomain .msn.com
acl allowed_https_sites dstdomain .yahoo.com
http_access allow CONNECT allowed_https_sites
http_access deny CONNECT

Smoothwall should have an equivalent way of handling CONNECT, even if it's via GUI.