Block or allow certain sites debian

[Original Poster]

hello,

 

I am using my debian pc as router and i want to block connections from places...a white list would be beneifcial for my purposes

 

 

I want to block websites as well as APIs on websites making calls to external sites like twitter/facebook.... I want to make sure these connections are not even called to boost speed (I am on a very VERY VERY limited connection speed) i am using a cache server which works great but im trying to shave off a few more seconds...

 

so i wont to cut out things that dont cache such as API requests and adverts etc any ideas will be welcome

[(Account no longer active)]

I could be wrong about this, but I presume you'd need to edit the hosts file on your Debian machine. Here's a guide: https://www.weg.ucar.edu/documentation/hostfile-unix.html

[Original Poster]

  On 04/06/2014 at 10:21, 68k said:

I could be wrong about this, but I presume you'd need to edit the hosts file on your Debian machine. Here's a guide: https://www.weg.ucar.edu/documentation/hostfile-unix.html

I will look into this,

 

I know there is a function in my proxy to sort out the websites... but I cannot seem to get it working...i am using squid

[Torolol]

using proxy you could (black-/white-)list specific urls but that only works on http,

whlle on https your choice would be limited to either block it entirely or allow it all, ie only works at domain level for https connections.

[Shaun N.]

I also use squid proxy, it's very effective along side Dansguardian

[Original Poster]

  On 04/06/2014 at 11:24, Shaun N. said:

I also use squid proxy, it's very effective along side Dansguardian

got any tips on setting up the whitelist? I cant seem to get it working

 

this is what I am inputting

 

acl whitelist dstdomain .example.com .google.com .bing.com

http_access allow whitelist

 

do I have to http_access deny all ? and allow 192.168.2.0/24 ? I dont know with this proxy :(

[Shaun N.]

  On 04/06/2014 at 11:38, SPEhosting said:

got any tips on setting up the whitelist? I cant seem to get it working

 

this is what I am inputting

 

acl whitelist dstdomain .example.com .google.com .bing.com

http_access allow whitelist

 

do I have to http_access deny all ? and allow 192.168.2.0/24 ? I dont know with this proxy :(

 

For Squid or Dansguardian?

[Shaun N.]

  On 04/06/2014 at 13:25, Shaun N. said:

For Squid or Dansguardian?

 

For Squid it would be something like this

 

acl localnet srv 192.168.1.0/25

http_access allow all whitelist

http_access deny all

http_port 8080

 

and set up your whitelist with sites or *.gov type sites

 

You can take a look here for some examples

 

http://www.webdnstools.com/articles/squid-proxy-whitelist

[Shaun N.]

How did you get on with this?

[Original Poster]

  On 05/06/2014 at 09:04, Shaun N. said:

How did you get on with this?

hello, I got it working in the end, it was all about placment (cheated a lil and used webmin)

 

but now I have two problems to overcome... 1 is to use squid to block multimedia (which it seems to be refusing to do) and another is allow https traffic as well as http through the proxy so I can stop the streaming.... im stuck on this one

[Original Poster]

  On 05/06/2014 at 10:36, SPEhosting said:

hello, I got it working in the end, it was all about placment (cheated a lil and used webmin)

 

but now I have two problems to overcome... 1 is to use squid to block multimedia (which it seems to be refusing to do) and another is allow https traffic as well as http through the proxy so I can stop the streaming.... im stuck on this one

the 443 traffic is mainly issues with the Iptables  right now i believe...