+ Post New Thread
Results 1 to 4 of 4
Internet Related/Filtering/Firewall Thread, blocking downloads on HTTPS in Technical; Hi all, been racking my brains trying to figure out how to let people access things like emails on https ...
  1. #1
    cpjitservices's Avatar
    Join Date
    Jul 2010
    Location
    Hessle
    Posts
    2,421
    Thank Post
    508
    Thanked 282 Times in 258 Posts
    Rep Power
    81

    blocking downloads on HTTPS

    Hi all,

    been racking my brains trying to figure out how to let people access things like emails on https which is great no problem but how do I stop people from downloading files from https sites ??

    I am currently running the latest version of Zentyal, which is built on Squid and Dansguardian.


    Thanks

  2. #2


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,461
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195
    Everything is 'downloading files' - the best you can do is limit by size or extension, in https you'll need to be doing mitm interception.

  3. #3

    Join Date
    Jan 2008
    Posts
    146
    Thank Post
    12
    Thanked 27 Times in 25 Posts
    Rep Power
    20
    How about blocking all https traffic apart from allowed sites? Yes it will create a small amount of admin work, but on the plus side you will have safe internet access for students by blocking all https proxy avoidance sites.

  4. #4


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,461
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195
    Quote Originally Posted by chris_uk View Post
    How about blocking all https traffic apart from allowed sites? Yes it will create a small amount of admin work, but on the plus side you will have safe internet access for students by blocking all https proxy avoidance sites.
    That's one (slightly brutal - cert checking has low intrusion and decent effectiveness) way of acting against https anonymisers... think the OP is after control of what happens on an individual site (like hotmail) tho - which will require full MITM.

SHARE:
+ Post New Thread

Similar Threads

  1. Blocking https sites with cachepilot
    By zag in forum Internet Related/Filtering/Firewall
    Replies: 3
    Last Post: 28th February 2011, 10:47 AM
  2. tmg blocking file downloads bigger than 1000 mb
    By goodhead in forum Internet Related/Filtering/Firewall
    Replies: 2
    Last Post: 17th November 2010, 10:15 AM
  3. Smoothwall https blocking help
    By cookie_monster in forum Network and Classroom Management
    Replies: 1
    Last Post: 22nd January 2010, 12:14 PM
  4. ISA server blocking https
    By DSapseid in forum Windows
    Replies: 6
    Last Post: 9th January 2009, 03:07 PM
  5. IE + blocking downloads through GPO
    By Kyle in forum Windows
    Replies: 1
    Last Post: 15th November 2006, 09:22 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •