On 06/17/2014 05:32 PM A Mohan Rao wrote: > actually i need to block https sites like https facebook or https youtube > etc with transparent proxy. > > now pls give any idea...!
You may want to try using the CONNECT method in order to filter HTTPS requests. Those happen before a secure connection is being established. This way you can filter I usually run dansguardian which has a quite complex but very effective way of filtering SSL related traffic. From its documentation: "Blanket SSL blocking so you can block SSL anonymous proxies and allow access to legitimate SSL sites such as banking by whitelisting" => http://dansguardian.org/ But be aware using CONNECT method based filtering requires the proxy to be explicitly configured on respective devices and therefore won't work with a transparent proxy. Additional information on the CONNECT method: http://wiki.squid-cache.org/Features/HTTPS Cheers
signature.asc
Description: OpenPGP digital signature
_______________________________________________ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list
