On 17/6/14 10:32 am, A Mohan Rao wrote:
actually i need to block https sites like https facebook or https youtube etc with transparent proxy.
So in order to block Facebook and Youtube, you're going to put all your users at risk of SSL MITM attacks on every secure website they visit?
You would be better off - I'd have thought - simply blocking the relevant DNS entries and/or IP ranges used by those websites you wish to block. DNS is probably better - and there are lists out there of Facebook DNS names, since blocking by IP range might knock out the whole CDN, which may be used by other sites as well.
Kind regards, Chris -- This email is made from 100% recycled electrons _______________________________________________ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list
