Blocking https sites with RM SafetyNet

[machin05]

Erm, how do you do it?!?

 

At one of my schools, RM SafetyNet the only form of filtering we have. We have a games epidemic at the moment and I want blanket ban anything with "games" in the URL. I have added a deny rule for *games* which works for http sites and google searches etc.

 

However, any https games sites still work. One in particular that the lads like to use is https://sites.google.com/site/unblockedgames77/

 

I have installed the RM SSL Filtering Certificate (tested and working) and updated the proxy settings to use sslfilter.proxy.rmplc.co.uk:8080 but it's made no difference to https sites. The above site is still not being picked up by the *games* rule. I then added a another deny rule for that specific URL, but still no joy

 

Am I missing something here, or is it impossible to filter https sites with RM SafetyNet?

[Boredguy]

Your not alone. We can't block https game sites on the grid either and sslfiltering is not actually enabled yet even though the certificate is deployed.

[machin05]

Ah right. Typical!

[ITGURU]

Thanks for that site , just added to our block list !

 

What filtering solution can't block https sites?! Few years back when got their costs, maybe that's why it was ridiculously cheap!

We're currently with Netsweeper but moving to Censornet.

 

Erm, how do you do it?!?

 

At one of my schools, RM SafetyNet the only form of filtering we have. We have a games epidemic at the moment and I want blanket ban anything with "games" in the URL. I have added a deny rule for *games* which works for http sites and google searches etc.

 

However, any https games sites still work. One in particular that the lads like to use is https://sites.google.com/site/unblockedgames77/

 

I have installed the RM SSL Filtering Certificate (tested and working) and updated the proxy settings to use sslfilter.proxy.rmplc.co.uk:8080 but it's made no difference to https sites. The above site is still not being picked up by the *games* rule. I then added a another deny rule for that specific URL, but still no joy

 

Am I missing something here, or is it impossible to filter https sites with RM SafetyNet?

[Steve21]

Never been able to block the google sites via HTTPS via normal RM filter, we had to put it on TMG rule before to get it to do it.

 

No idea why specifically that one but moo

 

Steve

[murtaza1]

plz tell me how i block this site https://sites.google.com/site/unblockedgames333/ i try every thing almost

[ITGURU]

plz tell me how i block this site https://sites.google.com/site/unblockedgames333/ i try every thing almost

 

We've had this site in our block list for a while!

Started using some regex entries as we've discovered that if you google for index of games swf there are loads of websites where games have been piggy backed on to websites, so I now have a block in place for /games/ etc

[OB1]

Google sites (sites.google.com) is only served over https, so you'll need a proxy capable of filtering https traffic.

[Wave9_Lee]

Hi SOPHOS does this. Let me know if you need detailed info,

 

cheers

 

Lee

[Bossbob]

Hi Lee

 

Some details would be good.

 

Cheers

 

Rob

[Wave9_Lee]

Hi Bossbob

 

It is required that you have HTTPS decrypt and scan running so have to distributed a self signed certificate out to the end clients, otherwise all you can do is block all access to the sites.google.com domain via the SNI information in the HTTPS header.

 

You can then use a regular expression to blacklist any URLs with the text ‘unblockedgames333’ in for the domain ‘sites.google.com’ (though you could just globally block it for any domain if you wanted to).

 

*It doesn’t come under any blockable category – unless you want to cripple all Internet Services – and there is something in the URL that prevents a normal URL block from working – I think there’s a redirection involved, the HTTP header is pretty complex for a simple site.

 

Hope that helps,

 

Lee