blocking downloads on HTTPS

[cpjitservices]

Hi all,

 

been racking my brains trying to figure out how to let people access things like emails on https which is great no problem but how do I stop people from downloading files from https sites ??

 

I am currently running the latest version of Zentyal, which is built on Squid and Dansguardian.

 

 

Thanks

[tom_newton]

Everything is 'downloading files' - the best you can do is limit by size or extension, in https you'll need to be doing mitm interception.

[chris_uk]

How about blocking all https traffic apart from allowed sites? Yes it will create a small amount of admin work, but on the plus side you will have safe internet access for students by blocking all https proxy avoidance sites.

[tom_newton]

How about blocking all https traffic apart from allowed sites? Yes it will create a small amount of admin work, but on the plus side you will have safe internet access for students by blocking all https proxy avoidance sites.

 

That's one (slightly brutal - cert checking has low intrusion and decent effectiveness) way of acting against https anonymisers... think the OP is after control of what happens on an individual site (like hotmail) tho - which will require full MITM.