hi,

There is a squid proxy server which handles all of http and https request. This server uses ntlm auth to authenticate and deny/allow acl for users. I deny facebook access and it works properly. But my problem is that when I reach a site for example cnn.com which has facebook contents (share, like, login,) I get an authentication popup window to give an username and password. It is very annoying...
So my question is whether is there any solution to block facebook website but not block other websites which has some facebook contents with squid?

thanks in advance

A real problem with stuff like that. Modern pages are full of links to junk.

Not everyone's choice but I'd make a hosts file entry for facebook.com to 0.0.0.0

There might be plenty of ways around this too from white and black lists in iptables to making a proxy.pac file and using layer 7+ firewalls.

Dear jefro,

Thanks your response. I don't want to deny facebook for all user just for a few, so unfortunately host file or iptables aren't good options