How to block only gmail access through https:

sudhakar.s · 11-05-2010, 03:45 AM

Hi All
Who can help me regarding squid proxy server...!!!

My Problem is: I want to stop gmail access without blocking https. Yes in my squid proxy normal http://gmail.com is not accessible. But gmail recently started https service by which user can still get access to gmail. I DONT WANT TO STOP https CAUSE ITS BEING USING BY MY COMPANY GOOGLE MAIL PROGRAM.

Thanks in Advance.

Regards,
Sudhakar.

win32sux · 11-05-2010, 05:33 AM

Well, there's two possibilities I can see. You can block by entire subdomains or by restricting the CONNECT method from being used on certain ones. Pull up encrypted Gmail on one on the clients and see what Squid's access log looks like. It should have the information you need to proceed. Post the relevant part here if you need help writing the ACLs.

stress_junkie · 11-05-2010, 07:45 AM

Quote:

Originally Posted by win32sux

... You can block by entire subdomains ...

Yes. Your gateway router may be able to block domains by name and/or by IP address. I do this for small businesses on their inexpensive gateway routers.

Of course there are ways for the end users to get around whatever you do. Domain name or domain address filtering can be circumvented by the end user accessing a public proxy server for example.