Blocking access to HTTPS sites

David81 · 09-18-2006, 05:01 PM

I have computers running Windows XP, and I want to block out e-mail sites, but I found out that google's g-mail has an https site that bypasses any internet filter, is there any way I can block access to https://mail.google.com/mail/?

**Cellus** · 09-19-2006, 10:21 AM

What are you using as an internet filter? You "can" block port 443 (SSL, used by HTTPS) but it will stop legitimate access. You could try blocking mail.google.com with/without the https prefix (try one instead of the other depending on what you've tried already, which may appease your filter).

Addendum: If your filter includes fields that allow you to extend its scope (meaning past port 80 and/or 8080), include port 443 in its coverage.

David81 · 09-19-2006, 09:24 PM

I'm using bluecoat k9 web protection, it doesn't block HTTPS. I would also like it to be able to block other https proxy sites, but it doesn't support that, are there any free ways to block certain sites that use https?

**johnwill** · 09-20-2006, 03:18 PM

Well, you can block sites by IP or URL with most firewalls.

David81 · 09-22-2006, 01:51 PM

There are some sites out there that allow people to bypass filters using HTTPS, the filter doesn't see it, is there any way I can make my computer block these sites?

**johnwill** · 09-22-2006, 06:10 PM

Give me an example of such a site, because I can't imagine how they're doing it.

crazijoe · 09-22-2006, 08:15 PM

Quote:

Originally Posted by johnwill

Give me an example of such a site, because I can't imagine how they're doing it.

Yes, I 'd like to know too.

David81 · 09-22-2006, 09:01 PM

https://megaproxy.com

**johnwill** · 09-23-2006, 10:12 AM

Block Megaproxy.

David81 · 09-23-2006, 12:10 PM

It won't, because of the Https at the begginning the filter will be prevented from seeing it.

**johnwill** · 09-23-2006, 04:46 PM

Well, that's a mystery to me. It has an IP address, and I've never seen a decent firewall that won't allow you to block an IP address. The URL content is not an issue if the machine never sees the site. Block 63.208.219.44, and I'm betting megaproxy will be blocked.

09-18-2006, 05:01 PM	#1 (permalink)
David81 Registered User Join Date: Aug 2006 Posts: 21 OS: XP	Blocking access to HTTPS sites I have computers running Windows XP, and I want to block out e-mail sites, but I found out that google's g-mail has an https site that bypasses any internet filter, is there any way I can block access to https://mail.google.com/mail/?

09-19-2006, 10:21 AM	#2 (permalink)
Cellus Moderator Networking Team Join Date: Aug 2006 Location: Canada Posts: 2,664 OS: Windows Vista Business SP1, Windows XP Professional SP3 My System	What are you using as an internet filter? You "can" block port 443 (SSL, used by HTTPS) but it will stop legitimate access. You could try blocking mail.google.com with/without the https prefix (try one instead of the other depending on what you've tried already, which may appease your filter). Addendum: If your filter includes fields that allow you to extend its scope (meaning past port 80 and/or 8080), include port 443 in its coverage. __________________ TSF Networking Team Virus/Trojan/Spyware Removal Help Donate! Last edited by Cellus; 09-19-2006 at 10:24 AM.

09-20-2006, 03:18 PM	#4 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,580 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Well, you can block sites by IP or URL with most firewalls. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

09-22-2006, 06:10 PM	#6 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,580 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Give me an example of such a site, because I can't imagine how they're doing it. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

09-23-2006, 10:12 AM	#9 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,580 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Block Megaproxy. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

09-19-2006, 09:24 PM	#3 (permalink)
David81 Registered User Join Date: Aug 2006 Posts: 21 OS: XP	I'm using bluecoat k9 web protection, it doesn't block HTTPS. I would also like it to be able to block other https proxy sites, but it doesn't support that, are there any free ways to block certain sites that use https?

09-22-2006, 01:51 PM	#5 (permalink)
David81 Registered User Join Date: Aug 2006 Posts: 21 OS: XP	There are some sites out there that allow people to bypass filters using HTTPS, the filter doesn't see it, is there any way I can make my computer block these sites?

09-22-2006, 09:01 PM	#8 (permalink)
David81 Registered User Join Date: Aug 2006 Posts: 21 OS: XP	https://megaproxy.com

09-23-2006, 12:10 PM	#10 (permalink)
David81 Registered User Join Date: Aug 2006 Posts: 21 OS: XP	It won't, because of the Https at the begginning the filter will be prevented from seeing it.

09-23-2006, 04:46 PM	#11 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,580 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Well, that's a mystery to me. It has an IP address, and I've never seen a decent firewall that won't allow you to block an IP address. The URL content is not an issue if the machine never sees the site. Block 63.208.219.44, and I'm betting megaproxy will be blocked. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience