From owner-freebsd-questions@freebsd.org Sun Aug 20 15:37:34 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 18739DDACA0 for ; Sun, 20 Aug 2017 15:37:34 +0000 (UTC) (envelope-from rsmith@xs4all.nl) Received: from lb1-smtp-cloud8.xs4all.net (lb1-smtp-cloud8.xs4all.net [194.109.24.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.xs4all.net", Issuer "RapidSSL SHA256 CA - G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A75CB68B3D for ; Sun, 20 Aug 2017 15:37:32 +0000 (UTC) (envelope-from rsmith@xs4all.nl) Received: from slackbox.erewhon.home ([83.162.243.5]) by smtp-cloud8.xs4all.net with ESMTPA id jSGzdUcamcQyLjSH0dWSnt; Sun, 20 Aug 2017 17:36:23 +0200 Received: from rsmith (uid 1001) (envelope-from rsmith@xs4all.nl) id 1238d by slackbox.erewhon.home (DragonFly Mail Agent v0.11+); Sun, 20 Aug 2017 17:36:21 +0200 Date: Sun, 20 Aug 2017 17:36:21 +0200 From: Roland Smith To: Ernie Luzar Cc: tyler@tysdomain.com, freebsd@edvax.de, "freebsd-questions@freebsd.org" Subject: Re: How to block facebook access Message-ID: <20170820153621.GA9420@slackbox.erewhon.home> Mail-Followup-To: Ernie Luzar , tyler@tysdomain.com, freebsd@edvax.de, "freebsd-questions@freebsd.org" References: <59988180.7020301@gmail.com> <5998A270.9070907@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="UugvWAfsgieZRqgk" Content-Disposition: inline In-Reply-To: <5998A270.9070907@gmail.com> X-GPG-Fingerprint: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 X-GPG-Key: http://www.xs4all.nl/~rsmith/pubkey.txt X-GPG-Notice: If this message is not signed, don't assume I sent it! User-Agent: Mutt/1.8.3 (2017-05-23) X-CMAE-Envelope: MS4wfDjw7oyvAlf4TJ7Vtis5jGairTRNIn4qeh3Es1fJib6jk/pYTKA9/cdFPO6+g3nEp7x5A9Sr0MZC+SJwzWSFDgUODMGX8BVe3gGLQpJfvmN55oCGMNdo o/5xXigChMWt6kqc2p9oiSq4z/6LXzNX3MqmroJ2LkOQ/V/wPyLeMLhwIInDvix/2hS0ji0/7Vmr5Q== X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 15:37:34 -0000 --UugvWAfsgieZRqgk Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Aug 19, 2017 at 04:41:20PM -0400, Ernie Luzar wrote: >=20 > > On 8/19/2017 2:20 PM, Ernie Luzar wrote: > >> Hello list; > >> > >> Running 11.1 & ipfilter with LAN behind the gateway server. LAN users > >> are using their work PC's to access facebook during work. > >> > >> What method would recommend to block all facebook access? > >> >=20 > > Littlefield, Tyler wrote: > > make your proxy just blacklist facebook.com and m.facebook.com? > > Blocking it will just let them view it on their phones though, so > > you're looking at a different issue altogether. > Already blocking 15 facebook login ip address which can be added to or > changes by FB anytime. Do not run a separate proxy on my server. Seems > like over kill just to block a single domain name. Any other suggestions? On my own network I block facebook.com, tfbnw.net, fbcdn.net, fbcdn.com, instagram.com and whatsapp.com on DNS level by returning NXDOMAIN. I would hazard a guess that *most* facebook users wouldn't be technically savvy enough to use an IP-adres. Roland --=20 R.F.Smith http://rsmith.home.xs4all.nl/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 5753 3324 1661 B0FE 8D93 FCED 40F6 D5DC A38A 33E0 (keyID: A38A33E0) --UugvWAfsgieZRqgk Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEV1MzJBZhsP6Nk/ztQPbV3KOKM+AFAlmZrGwACgkQQPbV3KOK M+DY9Q/8ClLvwppfPx8P2Wi3zZ3km+BrwddP91ZtJ8v9/gzu+4ArLQd9xwIZKO06 SOEKQQxG+Bp4FeSdKWO0T9pNq3cxB9/maG29oIqNmb1PbxksSZKPNjLseIPHiBOU SlZKQ97hV31cxeaHOSxsYNB1InYzF1nm7LnVF2GokZhx9vo9lI38hfNpOOdWh4Yu OCVXcJxkGlpOzgvT9fLNU82M+fp1CBlegot/vUk8fOAVQWyrH46CkIZ9FE1FIT7d qZ+eO6TyMX9fYqiHDGf1A+YuFQmUbEI2nMJeXLgA01FN6DZjB4zpRn9kXOeWYgYc KiKEs5Xw+6pPRl1AzjlMCQBWgK/CYTtroIpyqwGks618cKmFLu1A49atZlpi7slB RxZCHXhA2xuH9XybDh/XrqqOPn1Hvsy5RE9wcvdbaRe4nCpSOWazOtGD0ioIoRdX F7gTJG1L52bCj3OucYupF8+8MLxxQFXyXOMbmsGC39g2P69H4S23t3dUNOWQKYNF KFlbGl/UhtPUOi4AmwEuDLOPqST57u/nWruxMEYySjRIehzosJygmiiHQ7DdO/tn kg1RwL0F+eUVMBs+g2kHCy3FJIqcobyr5q2S/pFPUq+tnmipnnSMOgjzEq1iRTAk VN0Z7TyDIOxPn3WIh/Cnjl0WODp1FiLLJKxf33mFqITmcOsCNB4= =rV/A -----END PGP SIGNATURE----- --UugvWAfsgieZRqgk--