Menu

Block Facebook, Twitter and YouTube’s HTTPS Traffic In Squid Transparent Proxy Mode
After setting up Squid As Transparent Proxy Mode, most of the system admins try to block famous social media websites such as Facebook, Twitter and YouTube in their network.So in this guide we will learn how to Block HTTPS Traffic while Squid is running as Transparent Proxy.



We understand now that 443 port traffic is passing through iptables firewall. So with the help of iptables string matching feature we will see how to block Facebook, Twitter and YouTube HTTPS traffic.
Iptables Rule to Block Facebook in Squid Transparent Proxy Setup
iptables -I FORWARD -p tcp --dport 80 -m string --string 'facebook.com' --algo bm --to 65535 -j DROP

iptables -I FORWARD -p tcp --dport 443 -m string --string 'facebook.com' --algo bm --to 65535 -j DROP
Iptables Rule to Block Twitter in Squid Transparent Proxy Setup
iptables -I FORWARD -p tcp --dport 80 -m string --string 'twitter.com' --algo bm --to 65535 -j DROP

iptables -I FORWARD -p tcp --dport 443 -m string --string 'twitter.com' --algo bm --to 65535 -j DROP
Iptables Rule to Block YouTube in Squid Transparent Proxy Setup
iptables -I FORWARD -p tcp --dport 80 -m string --string 'youtube.com' --algo bm --to 65535 -j DROP

iptables -I FORWARD -p tcp --dport 443 -m string --string 'youtube.com' --algo bm --to 65535 -j DROP
Above rules will block entire traffic destine to 443 port but you can apply same rule on particular single ip, range of ips or complete network.
To Apply Same Rule on Single IP Address
iptables -I FORWARD -p tcp --dport 443 -s 192.168.2.10 -m string --string 'youtube.com' --algo bm --to 65535 -j DROP
To Apply Same Rule on Range of IP Addresses
iptables -I FORWARD -p tcp --dport 443 -m iprange --src-range 192.168.2.11-192.168.2.15 -m string --string 'youtube.com' --algo bm --to 65535 -j DROP
Above rule will block YouTube.com only specified ips from 11 to 15 other all range is allowed.
To Apply Same Rule on Whole Subnet of 192.168.2.0/24
iptables -I FORWARD -p tcp --dport 443 -s 192.168.2.0/24 -m string --string 'youtube.com' --algo bm --to 65535 -j DROP
www.hackthesec.co.in

About Author:


I am a Linux Administrator and Security Expert with this site i can help lot's of people about linux knowladge and as per security expert i also intersted about hacking related news.TwitterFacebook

Next
Newer Post
Previous
Older Post

0 comments:

Post a comment

 
Top