Cannot block https sites on squid pfsense - https

I am trying to block all traffic (I mean all the websites on the internet) and only allow google maps. I am using squid transparent proxy in pfsense.
well, the issue is that it blocks all the websites but allows the https, so everyone can connect to YouTube, Facebook and every website that uses https.
Is there any way to block the httpss websites except one or few?
Thanks!

Well you have 2 ways the 1st way is using WPAD which blocks https but i heard that some androids or some devices dont work as well so I cant tell you how good it works
https://forum.pfsense.org/index.php?topic=93060.0
Or the second way use pfblockerNG like I do and block all the sites that you do not need. Facebook and dropbox easy but youtube seems to come with google so by blocking youtube you block google unfortunately, Hopefully next month E2guardian is going to up and ready for https filtering.
If you need a list for certain sites let me know and I will attach the links to download the IPs
Hope this helps

Related

Reverse-Proxy Google site

We are trying to get a google site to run behind a proxy.
Spoke to a google support specialist and they said its possible, did not give any documentation and said to ask here.
A google website behind a nginx-proxy or Apache.
This proxy will be used to redirect traffic based on url.

socks5 proxy: enable for only certain IPs

I have a webpage and a little game server running on my own machine that is located at my work office.
The problem is that some people can't reach the webpage and game server, because of some network issues. The reasons are not the key, just take it (for almost all my community all things works fine, there just some troubles for a specific group).
So,
I have set up the test Droplet on Digital Ocean, with socks5 proxy installed.
https://github.com/hensly/socks5
And it all worked :) Clients that are restricted to connect directly are just using my proxy server to connect to the webpage or game server.
.
So my questions come up:
How can I limit my proxy to work only with certain IPs? Actually, I need only one IP - the IP of my server-pc, and that's it (the reserved (white) IP and domain name attached to it). Is there a way of such limitation on the proxy side? I just don't want them to use proxy for everything (mostly because there is not an unlimited Bandwidth and it could cost some extra).
Thanks <3
p.s. if you know other, more convenient ways to solve my problem, I'd appreciate it if you share your thoughts.

HTTP/S Site Maps

I am in the process of transitioning a fairly sizable website to https. However, I have found different information regarding site maps.
Should I switch my site map to https BEFORE I launch https?
Should I switch my site may to https AFTER I launch https?
Should I have two site maps (one with http protocols and the other with https)?
I am very concerned with a possible hit to SEO after https goes live so any and all suggestions would be appreciated!

Can I use google to determine vhosts on same IP?

Can I use google -- specifically i am thinking of the google ajax api -- to enumerate a list of host names of websites that are hosted on a particular IP address.
Note
Yes, I know that other mechanisms, such as MSN search and obviously DNS services can be used, but I am specificially looking for whether a google solution exists.
AFAIK Google doesn't give out the IP addresses in its search results (unless the URL is only accessible from IP address rather than a host name).
I know you only want Google solutions, but have you tried My IP Neighbors? You put in a URL or IP and it gives you the sites also hosted on the IP.
Not sure you can do with google ajax api; however I think that the best solution would be more oriented towards a sysadmin job (thus ask serverfault..), mainly:
find which nameserver is authoritative for such website
find out which other domains using that nameserver as authoritative
simply because websites hosted on the same server are often served by the same DNS.
On a side note, since a DNS can be authoritative for other domains (not hosted on that IP), you might want to double-check that list and do a lookup on all domains, filtering out those that are hosted on a different server.
This leaves open the question of load balancing, tho: what if a domain is hosted on more than one server?
The answer is left as an exercise to the reader. :)
I searched through Google's forums for SEO Q&A and technical Q&A. The issue of whether Google captures IP addresses is not directly addressed. However, there is at least one answer which suggests Google doesn't care about IP addresses (see squibble's second response.)

Block all urls on windows desktop using win32 API

I am trying to develop one application which can block all urls using win32 api on windows desktop application.
So is there any api or any procedure doing programmatically so that i can block all urls?
It's impossible to block just URLs. If you want to make sure no one can access the internet the only way to do this would be to unplug the ethernet cable. (Or whatever is giving you connectivity) Here's why:
Blocking all DNS resolution won't stop someone from accessing http://206.132.84.265/
Blocking port 80 and 443 won't stop someone from accessing a web site hosted on a non-standard port.
Denying access to IE and installation of any other software won't stop someone from downloading a browser that doesn't require to be installed (Like a text browser) and putting it on a thumb drive.
Buying an expensive firewall that blocks HTTP traffic won't be able to stop SSL operating on a non-standard port.
Believe me, back in highschool I worked in a warehouse with a scanner gun and figured out how I could check my email with it (with a little help from my computer at home) since an internet gateway was on the same network.
If you want to block people from surfing the web, disconnect the internet.
I suppose you can do it using the Windows Firewall API
http://msdn.microsoft.com/en-us/library/Aa366453.aspx
You can do this using Windows Firewall Protocol. This is an API provided by Microsoft.
For Vista it's straight-forward, but for XP you need to do some work around, as examples are not available for that.

Resources