Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-05 Thread justino garcia
What is the antivirus you use to block stuff?

On 6/4/10, Michel Servaes mic...@mcmc.be wrote:
 How does one go by blocking facebook twitter and youtube also how does
 one autoblock malicous sites
 Thanks
 Justin


 By the way : I didn't solve this by using squidguard (I've used to use
 this solution), but now we have an antivirus capable of blocking
 categories (webmail, social networksites, ...)
 This can be managed by computername, which is quite good to block only
 several computers of abusing the net...

 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org




-- 
Justin
IT-TECH

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-05 Thread justino garcia
Is their a way to have something beside clam av in havp

On 6/5/10, Michel Servaes mic...@mcmc.be wrote:

 What is the antivirus you use to block stuff?

 On 6/4/10, Michel Servaesmic...@mcmc.be  wrote:

 How does one go by blocking facebook twitter and youtube also how does
 one autoblock malicous sites
 Thanks
 Justin


 By the way : I didn't solve this by using squidguard (I've used to use
 this solution), but now we have an antivirus capable of blocking
 categories (webmail, social networksites, ...)
 This can be managed by computername, which is quite good to block only
 several computers of abusing the net...


 I'm using TrendMicro Worry Free (standard is enough), it has all the
 entries needed (you'd need a windows-server (can be a workstation too)
 though, to install it on - to manage all your workstations !)
 Check out their website, you can download a trial, to see if it fits
 your needs...

 Don't know what you have available :)
 The hosted version, doesn't require you to have a windows-server, but
 then again, this one doesn't have the blocklist yet (they once claimed
 to have it in the future sometime - but when  ??)

 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org




-- 
Justin
IT-TECH

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Michel Servaes
 How does one go by blocking facebook twitter and youtube also how does
 one autoblock malicous sites
 Thanks
 Justin

Install the proxy package, and use squidguard to block keywords...
Though I must say, the package only works best on a true pc/server
with a harddisk - not recommended on an Alix board.

An option to use an USB drive as temporary storage for caching sites,
would be a nice option...

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread justino garcia
Thanks

On Fri, Jun 4, 2010 at 7:58 AM, Michel Servaes mic...@mcmc.be wrote:

  How does one go by blocking facebook twitter and youtube also how does
  one autoblock malicous sites
  Thanks
  Justin

 Install the proxy package, and use squidguard to block keywords...
 Though I must say, the package only works best on a true pc/server
 with a harddisk - not recommended on an Alix board.

 An option to use an USB drive as temporary storage for caching sites,
 would be a nice option...

 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org




-- 
Justin
IT-TECH


Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Michel Servaes
 How does one go by blocking facebook twitter and youtube also how does
 one autoblock malicous sites
 Thanks
 Justin


By the way : I didn't solve this by using squidguard (I've used to use
this solution), but now we have an antivirus capable of blocking
categories (webmail, social networksites, ...)
This can be managed by computername, which is quite good to block only
several computers of abusing the net...

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Luke Jaeger
We use squidguard in combination with shallalist (www.shallalist.de)  
to block sites by category (malware, porn, gambling, etc).

You can also add individual domains to your blacklist by hand.
Works great.


Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org

On Jun 4, 2010, at 12:18 AM, justino garcia wrote:


How does one go by blocking facebook twitter and youtube also how does
one autoblock malicous sites
Thanks
Justin

--
Justin
IT-TECH

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org




-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Luis G. Coralle
2010/6/4 Luke Jaeger ad...@pvpa.org

 We use squidguard in combination with shallalist (www.shallalist.de) to
 block sites by category (malware, porn, gambling, etc).
 You can also add individual domains to your blacklist by hand.
 Works great.


 Luke Jaeger | Technology Coordinator
 Pioneer Valley Performing Arts Charter Public School
 www.pvpa.org


 On Jun 4, 2010, at 12:18 AM, justino garcia wrote:

  How does one go by blocking facebook twitter and youtube also how does
 one autoblock malicous sites
 Thanks
 Justin

 --
 Justin
 IT-TECH

 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org



 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org



Hi, squid no caching https pages. Facebook have https too (
https://www.facebook.com/ )
To block this you have to add rule like:

Destination:
Type: Network
Address: 66.220.144.0/20


See:
- http://wiki.developers.facebook.com/index.php/Facebook_IP_Addresses
- whois 69.63.189.16



-- 
Luis G. Coralle
Departamento de Informática
Facultad de Ciencias Médicas
Universidad Nacional del Comahue
Av. Luis Toschi y Los Arrayanes
Cipolletti - Río Negro
Tel. 0299 - 4782603 INT. 24 / Fax 0299 - 4776140
http://medicina.uncoma.edu.ar/


Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Kai Lan
I think the easiest way is over ride the dns. Or make the ips routed  
to a wrong destination by adding a static route rule.


Regards,

Kai

On 4 Jun 2010, at 15:41, Luis G. Coralle luiscora...@gmail.com  
wrote:





2010/6/4 Luke Jaeger ad...@pvpa.org
We use squidguard in combination with shallalist (www.shallalist.de)  
to block sites by category (malware, porn, gambling, etc).

You can also add individual domains to your blacklist by hand.
Works great.


Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org


On Jun 4, 2010, at 12:18 AM, justino garcia wrote:

How does one go by blocking facebook twitter and youtube also how does
one autoblock malicous sites
Thanks
Justin

--
Justin
IT-TECH

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Hi, squid no caching https pages. Facebook have https too ( https://www.facebook.com/ 
 )

To block this you have to add rule like:

Destination:
Type: Network
Address: 66.220.144.0/20


See:
- http://wiki.developers.facebook.com/index.php/Facebook_IP_Addresses
- whois 69.63.189.16



--
Luis G. Coralle
Departamento de Informática
Facultad de Ciencias Médicas
Universidad Nacional del Comahue
Av. Luis Toschi y Los Arrayanes
Cipolletti - Río Negro
Tel. 0299 - 4782603 INT. 24 / Fax 0299 - 4776140
http://medicina.uncoma.edu.ar/


Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Jaye Mathisen
openDNS can help with this as well.

2010/6/4 Kai Lan lk9...@me.com

 I think the easiest way is over ride the dns. Or make the ips routed to a
 wrong destination by adding a static route rule.

 Regards,

 Kai

 On 4 Jun 2010, at 15:41, Luis G. Coralle luiscora...@gmail.com wrote:



 2010/6/4 Luke Jaeger  ad...@pvpa.orgad...@pvpa.org

 We use squidguard in combination with shallalist (http://www.shallalist.de
 www.shallalist.de) to block sites by category (malware, porn, gambling,
 etc).
 You can also add individual domains to your blacklist by hand.
 Works great.


 Luke Jaeger | Technology Coordinator
 Pioneer Valley Performing Arts Charter Public School
  http://www.pvpa.orgwww.pvpa.org


 On Jun 4, 2010, at 12:18 AM, justino garcia wrote:

  How does one go by blocking facebook twitter and youtube also how does
 one autoblock malicous sites
 Thanks
 Justin

 --
 Justin
 IT-TECH

 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com
 support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org
 https://portal.pfsense.org



 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com
 support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org
 https://portal.pfsense.org



 Hi, squid no caching https pages. Facebook have https too (
 https://www.facebook.com/https://www.facebook.com/ )
 To block this you have to add rule like:

 Destination:
 Type: Network
 Address: 66.220.144.0/20


 See:
 - http://wiki.developers.facebook.com/index.php/Facebook_IP_Addresses
 http://wiki.developers.facebook.com/index.php/Facebook_IP_Addresses
 - whois 69.63.189.16



 --
 Luis G. Coralle
 Departamento de Informática
 Facultad de Ciencias Médicas
 Universidad Nacional del Comahue
 Av. Luis Toschi y Los Arrayanes
 Cipolletti - Río Negro
 Tel. 0299 - 4782603 INT. 24 / Fax 0299 - 4776140
 http://medicina.uncoma.edu.ar/http://medicina.uncoma.edu.ar/




Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Tim Dressel
We used openDNS at all our schools but we just finished putting all
our schools behind a single firewall so that didn't fly. We had to go
to a commercial filter product unfortunately. We did consider throwing
up DNS servers all over the place but it would have become ugly to
manage.



On Fri, Jun 4, 2010 at 11:28 AM, Jaye Mathisen mr...@mathisen.org wrote:
 openDNS can help with this as well.

 2010/6/4 Kai Lan lk9...@me.com

 I think the easiest way is over ride the dns. Or make the ips routed to a
 wrong destination by adding a static route rule.

 Regards,
 Kai
 On 4 Jun 2010, at 15:41, Luis G. Coralle luiscora...@gmail.com wrote:



 2010/6/4 Luke Jaeger ad...@pvpa.org

 We use squidguard in combination with shallalist (www.shallalist.de) to
 block sites by category (malware, porn, gambling, etc).
 You can also add individual domains to your blacklist by hand.
 Works great.


 Luke Jaeger | Technology Coordinator
 Pioneer Valley Performing Arts Charter Public School
 www.pvpa.org

 On Jun 4, 2010, at 12:18 AM, justino garcia wrote:

 How does one go by blocking facebook twitter and youtube also how does
 one autoblock malicous sites
 Thanks
 Justin

 --
 Justin
 IT-TECH

 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org



 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com

 Commercial support available - https://portal.pfsense.org



 Hi, squid no caching https pages. Facebook have https too (
 https://www.facebook.com/ )
 To block this you have to add rule like:

 Destination:
 Type: Network
 Address: 66.220.144.0/20


 See:
 - http://wiki.developers.facebook.com/index.php/Facebook_IP_Addresses
 - whois 69.63.189.16



 --
 Luis G. Coralle
 Departamento de Informática
 Facultad de Ciencias Médicas
 Universidad Nacional del Comahue
 Av. Luis Toschi y Los Arrayanes
 Cipolletti - Río Negro
 Tel. 0299 - 4782603 INT. 24 / Fax 0299 - 4776140
 http://medicina.uncoma.edu.ar/



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Kurt Buff
On Thu, Jun 3, 2010 at 21:18, justino garcia jgarciaitl...@gmail.com wrote:
 How does one go by blocking facebook twitter and youtube also how does
 one autoblock malicous sites
 Thanks
 Justin

 --
 Justin
 IT-TECH

If you have a DNS server for internal use in your org, consider
putting zones on it that are authoritative for the sites you wish to
block, then putting in a wildcard entry that points to 127.0.0.1

I do that for all of the sites you mention, plus a few others.

For the actually malicious stuff, the recommendations for
squid/squidguard are spot on.

Kurt

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



RE: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Ryan

 
 If you have a DNS server for internal use in your org, 
 consider putting zones on it that are authoritative for the 
 sites you wish to block, then putting in a wildcard entry 
 that points to 127.0.0.1
 
 I do that for all of the sites you mention, plus a few others.
 

I do this for a few sites myself using the dns server in PFsense.  I forward to 
an internal webserver that has a page that says Get to work and says some lie 
about All internet traffic is monitored and repeated attempts to access this 
site will be sent to your supervsior.   It's not perfect, but it works well for 
our user.


-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Tim Nelson
- Ryan radiote...@aaremail.com wrote:
  
  If you have a DNS server for internal use in your org, 
  consider putting zones on it that are authoritative for the 
  sites you wish to block, then putting in a wildcard entry 
  that points to 127.0.0.1
  
  I do that for all of the sites you mention, plus a few others.
  
 
 I do this for a few sites myself using the dns server in PFsense.  I
 forward to an internal webserver that has a page that says Get to work
 and says some lie about All internet traffic is monitored and repeated
 attempts to access this site will be sent to your supervsior.   It's
 not perfect, but it works well for our user.
 

Agreed. I use this method at several locations as well. The DNS server that is 
authoritative for those domains is on a different subnet/interface as well so I 
can use a NAT rule to ensure *ALL* DNS traffic is forced to go through that DNS 
server. It really is pretty slick. However, the more savvy users will just find 
some proxy out there to use. 'Proxy' has become a new buzzword for the social 
networking crowd as of late it seems...

--Tim

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Yehuda Katz
On Fri, Jun 4, 2010 at 3:30 PM, Tim Nelson tnel...@rockbochs.com wrote:

 However, the more savvy users will just find some proxy out there to use.
 'Proxy' has become a new buzzword for the social networking crowd as of late
 it seems...

 It doesn't even require a very savvy user. There are free email lists which
notify you by email of new proxy sites (peacefire.org).
Besides that, don't forget that many sites can be accessed just by their IP
addresses.


Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-04 Thread Kurt Buff
On Fri, Jun 4, 2010 at 12:54, Yehuda Katz yeh...@ymkatz.net wrote:
 On Fri, Jun 4, 2010 at 3:30 PM, Tim Nelson tnel...@rockbochs.com wrote:

 However, the more savvy users will just find some proxy out there to use.
 'Proxy' has become a new buzzword for the social networking crowd as of late
 it seems...

 It doesn't even require a very savvy user. There are free email lists which
 notify you by email of new proxy sites (peacefire.org).
 Besides that, don't forget that many sites can be accessed just by their IP
 addresses.

And that's why I'm also thinking of blocking by MIME type - flv
content in particular.

Kurt

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] block facebook twitter and youtube pfsense

2010-06-03 Thread David Burgess
On Thu, Jun 3, 2010 at 10:18 PM, justino garcia jgarciaitl...@gmail.com wrote:
 How does one go by blocking facebook twitter and youtube also how does
 one autoblock malicous sites


opendns is one way.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org