How to block the https request on zentyal ?

[vinhky20119]

hello everybody, 

I'm a newbie with zentyal, I has enabled the Transparent Proxy mode to block the http traffic, but I had a big problem I can not block the https traffic

For example: http://mail.google.com" was blocked,  but if somebody change to https://mail.google.com, it works.

Can somebody help me? 

Thanks for all

[fher98]

hello everybody, 

I'm a newbie with zentyal, I has enabled the Transparent Proxy mode to block the http traffic, but I had a big problem I can not block the https traffic

For example: http://mail.google.com" was blocked,  but if somebody change to https://mail.google.com, it works.

Can somebody help me? 

Thanks for all

Any luck?

[Escorpiom]

This has been answered already elsewhere on the forum. You cannot use the proxy to block secure traffic, use the firewall with network objects for that.

Cheers.

[jcmenguito]

hi,

if you want to block all https traffic, you can try this;

1. in Services > Add New, enter a new service with Service Name: https

2. tick the Internal check box.

3. click Add

4. in firewall > packet filter > filtering rules for internal networks > configure rules > add new;

    enter Decision = DENY
             Source = any
             Destination=any
             Service=https

5. Click Add

i hope this helps.

[arun]

you may also look at this

http://forum.zentyal.org/index.php?topic=6070.msg26168#msg26168

Arun

[fher98]

hi,

if you want to block all https traffic, you can try this;

1. in Services > Add New, enter a new service with Service Name: https

2. tick the Internal check box.

3. click Add

4. in firewall > packet filter > filtering rules for internal networks > configure rules > add new;

    enter Decision = DENY
             Source = any
             Destination=any
             Service=https

5. Click Add

i hope this helps.

thanks for the reply, but i dont need to block al https, only to sites like facebook, youtube, etc.

[vinhky20119]

Thanks jcmenguito ,  that works for me.

I created a new service "https" and set the source port in range from 441 to 445, and create new rule in Firewall,

Thanks for help.