Snapchat

[STK91]

Hi All,

 

Anybody know where the snapchat app connects to? the webpage is blocked here but the app still works. Finding students taking pictures and sending all day.

 

Cheers

[LosOjos]

If you have an Android handy, you can find out:

 

- Install Network Log (root only) or Connection Tracker (should work with any device)

- Enable logging in chosen app

- Send a message in Snapchat

- Open Network Log/Connection Tracker and see where Snapchat connected

 

 

It's likely they use multiple servers though, so you might want to try it a few times to see if you can find a range/selection of IPs to block

Edited September 12, 2013 by LosOjos

[seawolf]

Hi All,

 

Anybody know where the snapchat app connects to? the webpage is blocked here but the app still works. Finding students taking pictures and sending all day.

 

Cheers

 

Some webfilters such as the iBoss have this built in, but try blocking 'feelinsonice.appspot.com' and this should block Snapchat.

[STK91]

Blocked that address but still no joy....hmm:noidea:

[LosOjos]

Blocked that address but still no joy....hmm:noidea:

 

Did you try using one of the apps I suggested to find out what it's connecting to?

[Geoff]

You need to poision the dns for feelinsonice.appspot.com rather than blocking it.

[Oaktech]

my NGF is reporting my phone as connecting to 173.194.66.141 with an app id of snapchat. I think a lot of the problem seems to be that it is connecting via 1e100 servers and no packets rock up with snapchat along the side!

[jhothersall]

It uses a google server I believe

[jhothersall]

its https://feelinsonice.appspot.com/ sorry - appspot.com is google

[westy]

Just an update for those who search on this thread. You will find this url is also useful for allowing/preventing snapchat :-

 

feelinsonice-hrd.appspot.com

[jhothersall]

Just an update for those who search on this thread. You will find this url is also useful for allowing/preventing snapchat :-

 

feelinsonice-hrd.appspot.com

Ive tested that still no luck ...

[seawolf]

I've been able to block the Android app for Snapchat, but not on iOS. Looking at the network traffic associated with the iOS version of the app it appears to be routing data through the APN servers and/or Verisign.

 

All to intentionally fight around web filters. I've reported my findings to Apple because I believe this would be a violation of the APN terms of use, but we'll see if anything happens. I'm doubtful.

[Tarmac360]

Hi,Can you please share how you have managed to block the Snapchat App on Android devices. I have'nt had any joy with this so far.

[seawolf]

Hi,Can you please share how you have managed to block the Snapchat App on Android devices. I have'nt had any joy with this so far.

 

I was able accomplish that using the "block snapchat" feature in our iBoss web filter. I think the snapchat application blocker feature in our Watchguard XTM firewall also blocks it. As for the exact URL or method that is being used by the iBoss or Watchguard I'm not sure. Neither one blocks snapchat on iOS though because the iOS app is routing through Apple and/or Verisign servers based on what I'm seeing in my logs.

[BDoyle]

Even though blocking the URLs noted above (feelinsonice...) is supposed to work it doesn't as there is some sort of logic where Snapchat is using any SSL path on appspot.com to get by content filters. How to solve it? Block appspot.com entirely. Might break other things but it is easier to whitelist individual URLs than deal with Google's desire to bypass filters worldwide. Not allowing simple blocking of Apps for businesses or educational environments is unacceptable Google. Very close to blocking all Google sites if this keeps up.

[seawolf]

Even though blocking the URLs noted above (feelinsonice...) is supposed to work it doesn't as there is some sort of logic where Snapchat is using any SSL path on appspot.com to get by content filters. How to solve it? Block appspot.com entirely. Might break other things but it is easier to whitelist individual URLs than deal with Google's desire to bypass filters worldwide. Not allowing simple blocking of Apps for businesses or educational environments is unacceptable Google. Very close to blocking all Google sites if this keeps up.

 

This solution doesn't work so well if you are using Google Apps for your school. It wasn't my choice to use Google Apps mind you (and I would block all of Google.com if I could), but if I do something to foul it up it will be my neck in a noose not Google's.

 

EDIT: Yep, Wordle and dozens of other sites come up when I check my logs that use "appspot.com" domain and that's just from the past week. If I blocked appspot.com there would be a firestorm of grief we would get from the teachers and students.

 

Anyone else have a less destructive method of blocking Snapchat? I can do it for Android devices, but not iOS.

Edited February 21, 2014 by seawolf

[BDoyle]

Our school is not using Google Apps across the board but we are using it. It did take some time to whitelist the specific Apps that were needed for school but our content filter was quick to identify those "?.appspot.com" sites. So you wouldn't want to start on a Monday and wait for the phone calls of anger and frustration. The firestorm is short lived unless there is an expectation that students and teachers need the freedom to download and use at will. Then it is not worth the pain.

 

There seems to be a growing trend of App Developers to find ways to bypass content filters. My favorite so far is the use of content delivery networks by video streaming companies. Take Amazon Video for instance. Yes, you can block the URL for them but they farm out their App streaming to a content delivery network that has nothing to do with their video URL. *grumble*

 

Another thing to check would be your wireless APs and Layer 7 rules (if they have that capability). See if they have instant messenger or social networking options where Snapchat might fall under.

 

I know it has been requested of Apple to include a future "feature" that would allow for whitelist and blacklist of iOS Apps through third party MDMs. But that doesn't help the here and now.

[caffrey]

Was there any resolve to this? It's running rampant here

[STK91]

Hi,

 

Our LEA have just moved over to a new filtering system (lightspeed) & we found snapchat had been blocked with this.

[caffrey]

Cheers, I'm looking at lightspeed appliances at the mo, has anyone got any way of blocking this on a smoothwall ?

[OB1]

Cheers, I'm looking at lightspeed appliances at the mo, has anyone got any way of blocking this on a smoothwall ?

Are they installing and using this on school equipment? If so there's a case for some kind of Mobile Device Management.

Decrypt and inspect breaks most apps unless you make specific allowances for them.

Also make sure you're blocking Social Networking Sites and / or Instant Messaging sites.

[caffrey]

It's BYOD, all the social media options are ticked, hopefully when we go 1:1 we can properly monitor devices.

[OB1]

It's BYOD, all the social media options are ticked, hopefully when we go 1:1 we can properly monitor devices.

Does that include mobile phones?

[caffrey]

iPhones / android and iPads

[OB1]

The iPads shouldn't work unless they're the 3G versions. If you're having trouble with those over WiFi we can look deeper.

The phones will just fall back to 3G, there's not much anyone can do about that I'm afraid.