LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 06-22-2009, 07:02 AM   #1
satishmali1983
LQ Newbie
 
Registered: Mar 2009
Distribution: Mandriva 2008.0
Posts: 21

Rep: Reputation: 16
how to block gmail & gtalk (https traffic)using squid


Hi
I am using Mandriva 2008.0 Edition. I want to block gmail & gtalk using squid proxy server.

I already block http traffic using squid proxy like http://www.gmail.com
but when user go trough using https://www.gmail.com then squid is unable to block these traffic.
Another problem is that i want to give access to gmail & gtalk from some special user's but block to rest of all others.
Please help me to sort out these problem

If it is not possible to block https traffics using squid porxy, please suggest me how to write iptable rules to block gmail & gtalk.

i am using "Firestarter" as firewall but it doesn't provide option to block
ip address.
 
Old 06-22-2009, 07:11 AM   #2
fpmurphy
Member
 
Registered: Jan 2009
Location: /dev/ph
Distribution: Fedora, Ubuntu, Redhat, Centos
Posts: 299

Rep: Reputation: 62
Rather than trying to block access in Squid, I would do all this type of stuff in iptables i.e.
Code:
iptables -A INPUT -s gmail.com -j DROP
iptables -A OUTPUT -d gmail.com -j DROP
 
Old 06-23-2009, 06:30 AM   #3
vap16oct1984
Member
 
Registered: Jun 2009
Location: INDIA
Distribution: RHEL-5
Posts: 174
Blog Entries: 3

Rep: Reputation: 38
Its not goona work if u use iptables as it blocks for every user. Here the condition is different client want to block gmail or gtalk for some users only not for all.

Use acl in squid. u can do it easily there
 
Old 06-24-2009, 01:10 AM   #4
satishmali1983
LQ Newbie
 
Registered: Mar 2009
Distribution: Mandriva 2008.0
Posts: 21

Original Poster
Rep: Reputation: 16
Quote:
Originally Posted by vap16oct1984 View Post
Its not goona work if u use iptables as it blocks for every user. Here the condition is different client want to block gmail or gtalk for some users only not for all.

Use acl in squid. u can do it easily there
Thanks for your reply
But there is one problem with squid is unable to block https traffic, http traffic is blocked successfully & working fine. But for ex. if try to access https://www.gmail.com then user can access it.
If i try to block 443(https) port then all the secured site will block.
 
Old 06-25-2009, 01:22 AM   #5
vap16oct1984
Member
 
Registered: Jun 2009
Location: INDIA
Distribution: RHEL-5
Posts: 174
Blog Entries: 3

Rep: Reputation: 38
hey why are u tying to block port 443 i u do this then all ur security port will blocked. So dont do this

just block the site not port.

https://mail.google.com/mail/
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to block https sites through ACL in squid avi_tokade Linux - Newbie 5 04-12-2011 05:53 PM
block gtalk in Squid sandeepthug Linux - Software 2 04-01-2009 07:07 AM
How can I block HTTPS packets with iptables/Squid? sanjee Linux - Security 5 10-29-2008 04:52 PM
how to block yahoo chat & gmail chat with squid sunlinux Linux - Networking 1 08-10-2007 09:33 AM
How to block gtalk messenger through squid sakthi.s Linux - Server 4 04-18-2007 02:51 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 10:36 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration