Re: [Ilugc] block facebook squid

2012-03-07 Thread Suraj Kumar
On Tue, Mar 6, 2012 at 1:05 PM, Mohan Sundaram  wrote:

> If NAT is enabled, then you'll need to redirect DNS requests to a
> local DNS server which either denies access by dropping those
> requests.
>

Messing with the World's DNS is a Bad Idea, IMHO. Keeping track of such
'blockings' you've done all over the place (at the DNS, proxy and firewall)
will eventually get tedious.

regards,

  -Suraj

-- 
Career Gear - Industry Driven Talent Factory
http://careergear.in/
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread 0
> i am using squid for block some sites ,but i am unable block  facebook
> ,gmail ...like https site
> please help me
>

for secure connections (HTTPS), it is most likely that CONNECT tunnel is 
used. Did you check out the following page ?

http://wiki.squid-cache.org/Features/HTTPS#CONNECT_tunnel

Since, its a tunnel, you can probably restrict access only by denying 
domain names instead of urls and such. you should try the following and 
see if it works,

http://wiki.squid-cache.org/SquidFaq/SquidAcl#Squid_doesn.27t_match_my_subdomains

-- 
0
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread sag kavin
> >This is a clumsy and often unworkable solution.
>
> >1. It has to be done on each individual client machine using the squid
> proxy.
> >2. It has to be constantly updated on each machine.
> >3. And every browser on said client machine must be configured NOT TO use
> the proxy for such banned domains.
> >
> >Very clumsy. There has to be a more elegant way.
> >
> >...KRS


 Its not necessary to do it in individual machines if you block direct
access to DNS servers. Only in squid machine its enough to put this
configuration. In our college its successfully working now.
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread Sundaram Ramachandran
> edit /etc/hosts and add following in last line
> 127.0.0.1 
> This will redirect the requests to your machine which running the squid
> proxy server, so user can't reach that website.

This is a clumsy and often unworkable solution. 

1. It has to be done on each individual client machine using the squid proxy.
2. It has to be constantly updated on each machine.
3. And every browser on said client machine must be configured NOT TO use the 
proxy for such banned domains.

Very clumsy. There has to be a more elegant way.

...KRS
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread sag kavin
> > Hi ilugs
> >
> > i am using squid for block some sites ,but i am unable block  facebook
> > ,gmail ...like https site
> > please help me
> >
> > with thanks
> > Asir
> > ___
> > ILUGC Mailing List:
> > http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
>
edit /etc/hosts and add following in last line
127.0.0.1 
This will redirect the requests to your machine which running the squid
proxy server, so user can't reach that website.

With Regards,
S.A.G.Kavin
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-06 Thread Karthikeyan Venkatraman
On Mon, Mar 5, 2012 at 9:12 PM, rmariya sagaya asirvatham <
asir.li...@gmail.com> wrote:

> Hi ilugs
>
> i am using squid for block some sites ,but i am unable block  facebook
> ,gmail ...like https site
> please help me
>
> with thanks
> Asir
> ___
> ILUGC Mailing List:
> http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
>


Hi,

You should use ACL in squid which will block the sites you required.

Please find the url link which brief the procedure.

http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch32_:_Controlling_Web_Access_with_Squid

Thanks,
V. Karthick

My Experience shared in : http://vkarthickeyan.wordpress.com
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-05 Thread Mohan Sundaram
On Tue, Mar 6, 2012 at 11:19 AM, Krishnaswamy Viswanathan
 wrote:
> by using squid it's not possible.
>
> On Mon, Mar 5, 2012 at 9:12 PM, rmariya sagaya asirvatham <
> asir.li...@gmail.com> wrote:
>
>> Hi ilugs
>>
>> i am using squid for block some sites ,but i am unable block  facebook
>> ,gmail ...like https site
Please search archives for this discussion that took place a while ago.

If your gateway does NAT, I presume you are using squid as a
transparent proxy. If the gateway does not NAT, then the clients
cannot reach the Internet except thro' a proxy server like squid via
an explicit proxy configuration in the browser. If this is the case,
shouid should be able to control access to these sites.

If NAT is enabled, then you'll need to redirect DNS requests to a
local DNS server which either denies access by dropping those
requests.

-- Mohan Sundaram
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


Re: [Ilugc] block facebook squid

2012-03-05 Thread Krishnaswamy Viswanathan
by using squid it's not possible.

On Mon, Mar 5, 2012 at 9:12 PM, rmariya sagaya asirvatham <
asir.li...@gmail.com> wrote:

> Hi ilugs
>
> i am using squid for block some sites ,but i am unable block  facebook
> ,gmail ...like https site
> please help me
>
> with thanks
> Asir
> ___
> ILUGC Mailing List:
> http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
>
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc


[Ilugc] block facebook squid

2012-03-05 Thread rmariya sagaya asirvatham
Hi ilugs

i am using squid for block some sites ,but i am unable block  facebook
,gmail ...like https site
please help me

with thanks
Asir
___
ILUGC Mailing List:
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc