Re: [Ilugc] block facebook squid

2012-03-07 Thread Suraj Kumar
On Tue, Mar 6, 2012 at 1:05 PM, Mohan Sundaram mohan@gmail.com wrote:

 If NAT is enabled, then you'll need to redirect DNS requests to a
 local DNS server which either denies access by dropping those
 requests.


Messing with the World's DNS is a Bad Idea, IMHO. Keeping track of such
'blockings' you've done all over the place (at the DNS, proxy and firewall)
will eventually get tedious.

regards,

  -Suraj

-- 
Career Gear - Industry Driven Talent Factory
http://careergear.in/
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread Karthikeyan Venkatraman
On Mon, Mar 5, 2012 at 9:12 PM, rmariya sagaya asirvatham 
asir.li...@gmail.com wrote:

 Hi ilugs

 i am using squid for block some sites ,but i am unable block  facebook
 ,gmail ...like https site
 please help me

 with thanks
 Asir
 ___
 ILUGC Mailing List:
 http://www.ae.iitm.ac.in/mailman/listinfo/ilugc



Hi,

You should use ACL in squid which will block the sites you required.

Please find the url link which brief the procedure.

http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch32_:_Controlling_Web_Access_with_Squid

Thanks,
V. Karthick

My Experience shared in : http://vkarthickeyan.wordpress.com
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread sag kavin
  Hi ilugs
 
  i am using squid for block some sites ,but i am unable block  facebook
  ,gmail ...like https site
  please help me
 
  with thanks
  Asir
  ___
  ILUGC Mailing List:
  http://www.ae.iitm.ac.in/mailman/listinfo/ilugc

edit /etc/hosts and add following in last line
127.0.0.1 Website address you need to block.com
This will redirect the requests to your machine which running the squid
proxy server, so user can't reach that website.

With Regards,
S.A.G.Kavin
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread Sundaram Ramachandran
 edit /etc/hosts and add following in last line
 127.0.0.1 Website address you need to block.com
 This will redirect the requests to your machine which running the squid
 proxy server, so user can't reach that website.

This is a clumsy and often unworkable solution. 

1. It has to be done on each individual client machine using the squid proxy.
2. It has to be constantly updated on each machine.
3. And every browser on said client machine must be configured NOT TO use the 
proxy for such banned domains.

Very clumsy. There has to be a more elegant way.

...KRS
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread sag kavin
 This is a clumsy and often unworkable solution.

 1. It has to be done on each individual client machine using the squid
 proxy.
 2. It has to be constantly updated on each machine.
 3. And every browser on said client machine must be configured NOT TO use
 the proxy for such banned domains.
 
 Very clumsy. There has to be a more elegant way.
 
 ...KRS


 Its not necessary to do it in individual machines if you block direct
access to DNS servers. Only in squid machine its enough to put this
configuration. In our college its successfully working now.
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread 0
 i am using squid for block some sites ,but i am unable block  facebook
 ,gmail ...like https site
 please help me


for secure connections (HTTPS), it is most likely that CONNECT tunnel is 
used. Did you check out the following page ?

http://wiki.squid-cache.org/Features/HTTPS#CONNECT_tunnel

Since, its a tunnel, you can probably restrict access only by denying 
domain names instead of urls and such. you should try the following and 
see if it works,

http://wiki.squid-cache.org/SquidFaq/SquidAcl#Squid_doesn.27t_match_my_subdomains

-- 
0
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


[Ilugc] block facebook squid

2012-03-05 Thread rmariya sagaya asirvatham
Hi ilugs

i am using squid for block some sites ,but i am unable block  facebook
,gmail ...like https site
please help me

with thanks
Asir
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-05 Thread Krishnaswamy Viswanathan
by using squid it's not possible.

On Mon, Mar 5, 2012 at 9:12 PM, rmariya sagaya asirvatham 
asir.li...@gmail.com wrote:

 Hi ilugs

 i am using squid for block some sites ,but i am unable block  facebook
 ,gmail ...like https site
 please help me

 with thanks
 Asir
 ___
 ILUGC Mailing List:
 http://www.ae.iitm.ac.in/mailman/listinfo/ilugc

___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-05 Thread Mohan Sundaram
On Tue, Mar 6, 2012 at 11:19 AM, Krishnaswamy Viswanathan
krishnaswamy@gmail.com wrote:
 by using squid it's not possible.

 On Mon, Mar 5, 2012 at 9:12 PM, rmariya sagaya asirvatham 
 asir.li...@gmail.com wrote:

 Hi ilugs

 i am using squid for block some sites ,but i am unable block  facebook
 ,gmail ...like https site
Please search archives for this discussion that took place a while ago.

If your gateway does NAT, I presume you are using squid as a
transparent proxy. If the gateway does not NAT, then the clients
cannot reach the Internet except thro' a proxy server like squid via
an explicit proxy configuration in the browser. If this is the case,
shouid should be able to control access to these sites.

If NAT is enabled, then you'll need to redirect DNS requests to a
local DNS server which either denies access by dropping those
requests.

-- Mohan Sundaram
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc