Netgate Store

Author Topic: How do I block Facebook with Squid?  (Read 215 times)

0 Members and 1 Guest are viewing this topic.

Offline Yankee19

  • Newbie
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
How do I block Facebook with Squid?
« on: January 23, 2018, 07:19:21 am »
Hi!
I have a problem, I've made Facebook blocking instructions but it does not work.. How can I block a Facebook page using Squid or another program?

Offline NogBadTheBad

  • Hero Member
  • *****
  • Posts: 639
  • Karma: +51/-0
    • View Profile
Re: How do I block Facebook with Squid?
« Reply #1 on: January 23, 2018, 08:33:24 am »
Snort and openappid rules may do it.

if you want to just block facebook create 3 custom rules that read :-

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"facebook_apps";flow:from_client;appid:facebook_apps; sid:70101 ; classtype:misc-activity; rev:1;)

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"facebook";flow:from_client;appid:facebook; sid:70439 ; classtype:misc-activity; rev:1;)

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"facebook_like";flow:from_client;appid:facebook_like; sid:72794 ; classtype:misc-activity; rev:1;)

Just tried it with those 3 rules, its blocking from a web browser but not the mobile app, maybe a few more rules needed.

« Last Edit: January 23, 2018, 09:57:06 am by NogBadTheBad »