pfSense Block FACEBOOK https | How-to/Guide/Tutorial
ฝัง
- เผยแพร่เมื่อ 8 ก.ย. 2024
- Visit my website iamasuperuser.com for more!
This video will guide you on how to block https websites like facebook using pfSense.
Steps:
1. Get the IP of facebook in your network using 'ping
2. Create an Alias in pfSense and enter the IPs you have
3. Create a rule to block those IP in your Alias
4. Test. Clear browsing history and restart pfSense if needed
If you find this video helpful, show your support and gratitude by hitting LIKE, SHARE & SUBSCRIBE! -- update -- now you can DONATE! just click the link here - www.paypal.com... Thanks!
Visit my blog @ www.iamasuperus...
![[Watch Party] RoV Pro League 2024 Winter | ( Bacon Time Vs PSG )](http://i.ytimg.com/vi/zM25REvnJW4/mqdefault.jpg)
As a shortcut you can go to your Diagnostic>DNS Lookup> you can create alias there, you dont have to ping a certain website again and again.
Yes you may use any tools and ways you prefer... Thanks for your thoughts Deve Dames
Hi Noriel, Have you by any chance encounter setting up SKY Broadband with PFSense?
Deve Dames Not yet... but I think there should be no problem with that...
Well,.Thanks
ok after adding alias what to do I mean what rule should be made? can you complete steps?
Thank this lesson and it will work perfectly
You are welcome :)
Thanks man, we run a small cyber cafe and we have some serious bandwidth probs atm (5mb on a 100mb line) we tell gamer customers to lay off facebook so they dont lag each other out (and it works perfectly) but as soon as someone uses facebook the line dies, this way now i can have LAG FREE GAMING any time i want, meanwhile the cable company increases the line capacity on our block
Oscar Velazquez Im happy to hear that I'm able to help..somehow.. and you are welcome sir...Thanks too...
Just what I needed. Thanks!
+AnonymousYT welcome.
here i am again, binge watching. :)
Fantasting video, Thanks a lot Noriel. I learnt a lot from your videos
Sridhar Cherukuri Welcome and thanks also sir! :)
Good
Hi dear, how can I do the same to my accesspoints which are in a vlan of my l3 switch??
Hi thanks for tutorial. But i have a question. I am operating Pfsense on static ips. And i have few ips where i have to open Facebook youtube etc. Then how would i block and access to these Ips.
Regards
using this way of blocking means you will have to update the IP list until you've reached all possible IPs. in a few minutes you will not likely have the full list of IPs that facebook is using. Another way, but not fool proof is to override the DNS for facebook.com and send the traffic to localhost, or to any other IP. This is done in DNS Forwarder -> Host Overrides. Add a new host, Host: www domain: facebook.com and then IP Address: 127.0.0.1 , or any other IP to redirect to. Under alias, add another one without the www for host, and then you have overridden both www.facebook.com and facebook.com
Mark Dueck I'll try that. Thanks sir
***** can we have a video in this dns forward, it looks liek a more effective one, i did use the diagnosis and dnslookup for youtube and blocked them but some how youtube is accesd on my network enviroment.
is there a way we can set the dns forward to automaticaly set it self on and off ?
Pherez Sigu I already have a video on how to block youtube in my channel but not the way as we did on blocking facebook. I'll try the dns forward" as suggested, soon.. just subscribe to get updates. THanks
awesome !!!!
+Mangesh Wagle Thanks!
Good Work
+Hayat Khan Thank you sir! more "goodwork" coming. stay tuned :)
Hi sir, May I ask a question.. how if you have exeptions IP address. like Managers that should access to facebook. Where do you configure it ? hope for your response. thank you
Here iamasuperuser.com/2014/08/block-https-websites-like-facebook/
Maraming Salamat Noriel
+Manny Felicio walang ano man po
Followed the instructions to the dot but after a while Facebook can still be accessed by users. I tried doing DNS lookup to other network say netcafe, my house and a friends house to get all possible FB IPs but even after defining these IP users can still browse to FB. Upgraded my pfsense box to 2.2.4-RELEASE (amd64) built on Sat Jul 25 19:57:37 CDT 2015 FreeBSD 10.1-RELEASE-p15 still have the same problem. How to fix this? pls help. Also i have defined 8 aliases, does it have effect on the network speed? we have 2mb leased line but 45 desktop PC and 30 handheld devices. I cannot totally block FB and other sites because 5 of our bosses use FB and they do not want to be filtered out hence their IPs are included in Dansguardin's exempted IP list. Really need help..
thanks for this amazing video, I have opnsense firewall I could not block a site with https like facebook could you please help me with that.
thanks
hi +M Abdilahi ...I never use opnsense yet, so Im not sure how it works. But you can try to do the same as shown in this video for pfsense. There are more ways on how to accomplish the same using pfsense, I'll post more videos soon on this channel. Thank you
THANKS A LOT
+Anas Vahora welcome
thankyou :)
You're welcome 😊
Nice tutorial, but Facebook keeps updating or Switching the Ips, do you know if is there another way to populate list of Ips automatic in Pfsense like I saw on Mikrotik?
I'll be uploading a new video soon.. a new and better way to block facebook. :) .Thank you
Thanks Bro
good work
how can i clear the dns history on every client computer did you think about this
hi noriel thanks for your tuitorial, i have tried this and it has worked on facebook, can the same apply to youtube ?
how does port forwarding work if at all you need to block sites using port forwarding
Pherez Sigu Hi! I have a video on how to block youtube using different method, browse my how-to videos.
I never tried port forwarding, I'm sorry, but I'll include that to my next to do list maybe :) Thanks
*****I jst noticed tht dns forwarder only blocks http not https so the trick is to use face book https and also yhe same applies to youtube.morw so I noticed tht once a user has instllaed add on like dotvpn the user can do and access sites even if the sites arw blocked.
I use the DNS option and point to an internal address
thanks pre...
+kramyy lost wala un :)
ahm noriel may tuts ka din ba kung panu mag dual wan ng network?? may dlawa kasi aq isp pldt static tapus dhcp papaanu kaya i dual wan?? thanks pre... more power!!
Gracias!!!
+Rodrigo Lama bienvenida!
sir can i blocked Facebook access for selected IP in pfsense
Yes iamasuperuser.blogspot.com/2014/08/block-https-websites-like-facebook.html
Please how do I locate the pfsense main diretory?
What do you mean? Can you elaborate? Thanks
Hello sir.I can still access blocked websites using VPN/Proxies? do i counter it again?
Sir Noriel.. ask ko lng po if pano naman magblock ng facebook apps or games.. Bago lng po ko sa pfsense and gusto ko matuto.. I'm using pfsense 2.1.3 ..thanks...
After following the steps site is not blocking.
Sorry to hear that. This method might still work for others and might not.
Hi noriel, nakuha ko naman ang tutorial mo. Kaso ang problem ko, kapag nilagyan ko ng google dns (8.8.8.8) yung local network ko. Na babypass yung rule. Ano kaya pwd ko gawin?
+TheHikaru1207 lagyan mo ng dns antibypass rule :)
To get a list of all Facebook IP's, check doc.pfsense.org/index.php/Blocking_websites. You can enter the command in Diagnostics->Command. Copy the list of IPs and import it on the Aliases main page.
pero eso solo sirve por el momento porque despues el ip de facebook es cambiante !
+PocO o TodO (Danie) puede actualizar la lista en cualquier momento .. pero es mejor si podemos tener una solución estable y permanente. Gracias
merci bp
tanong ko lang po ano software yang sa ilalim ng start button sir yung sa po na bar san po pwede makakita niyan at mag download.. thak's po sana meron din po kayo tutorial tungkol jan..
+Franklin Laxa You mean the OS I'm using? it's ZorinOS
+noriel barrometro (iamasuperuser) thank po sir master noriel pwede ko po malaman ang fb nyo meron lang po ako mga tanong ok naman po seting ko sa web gui na gaya ko naman po lahat ng video tutorial mo pero wala po lumalabas na net sa lan ko yun po problema ko yung server lang po meron net...
+Franklin Laxa set the IP of clients , it should be under pfsense network... also set your pfsense LAN dhcp enabled.
great stuff, how do i apply this to a user or a group only?
geepriest I already have a simple video here th-cam.com/video/T2DP-GBZUno/w-d-xo.html
or read about it here in my blog iamasuperuser.blogspot.com/2014/08/block-https-websites-like-facebook.html
*****
thanks again...EXCELLENT tutorial
I downloaded pfSence in order to follow the video instructions, but I can not open the file.
I chose the 32-bit and Platform: Live CD with installer (I did not know what else to choose)
Do I need to burn it on a DVD? www.pfsense.org/download/mirror.php?section=downloads
Is there another program similar to this that is less complicated to download? I have windows vista if that makes a difference.
+Sara Lynn extract/unzip the downloaded installer.. you should get the pfsenseinstaller.ISO not the .GZ
I did use winzip to extract it, but it turned into 23 folders and I didn't know what to do from there. I couldn't open the program because it's just a bunch of folders. I will try your suggestion, thank you :)
Why is Video 4 Private?
how to control speed using pfsence.
melquiades jr pailangco th-cam.com/video/-zGy55NrEps/w-d-xo.html please take some time to browse other videos on this channel.
tnx bro/
sir pano po ma limit yung 30mbs to 300+ user, tsaka pano po i-block yung gaming?
hi sir ask ko lang kong panu ko macoconect yung pfsense sa windows 7? i am using vmworkstation12 dko makuha kung anu bang settings ang gagawin ko para mapagconnect ko sila thankss..
+john john larga try this th-cam.com/video/h97J70hzcP0/w-d-xo.html
+noriel barrometro (iamasuperuser)
thankyou sir! it works! kaso nung pagcheck ko pfsense walang menu na nakalagy na packages d ko mapraktis yung tutorial nyu dko bakit kaya walang package to updated naman gamit kong pfsense. baka may idea ka sir thanks ulit !
how to control ung pfsence. i need to know it. tnx bro.
melquiades jr pailangco th-cam.com/video/-zGy55NrEps/w-d-xo.html please take some time to browse other videos on this channel..and please dont spam your questions . thanks
When you are are pinging again, you are just getting the same IP in your DNS query cache. If you wait long enough, you will be getting a new IP and this process could take forever. This method wiil not be 100% blocking facebook, it WILL find a new ip one day or another.
so what do you suggest? thanks!
anyway so far until now it works for me... but if you have better solutions, suggestions are welcome
Use the command (on linux) :
'whois -h --whois.radb.net-- -- '-i origin AS32934' | awk '/^route:/ {print $2;}' | sort | uniq'
whois dash h (sorry youtube formatting !)
Basically this get all the referenced subnet for the as whois query's ASOrigin of a domain. Now this will get ALL the current facebook subnets. Save the result to a file. Upload it to your website somewhere. Create an alias using URL list and point it to your website text file containing the output of the command,
Next create a LAN rules blocking based on destination using the alias. Make sure to use any protocols and maybe log the blocks for debugging.
You might have to reload / script this command / file result from time to time. Mine has currently 72 SUBNETS (which is a LOT more than singles IPs)
Hope this help :)
Hello francis, sorry for bothering you, but whats the exact command that you need to do to get the subnets and print then to a .txt file?
This method will NOT work, you need to add all facebook IPs until no end.
+AvAr have you tried it? did you watched the video until the end? Well, in my setup, it WORKS
sir yung link di na po maacess...
ww1.iamasuperuser.com/?subid1=bd12ebb6-91d9-11e9-9a88-b00e6cc0dd24
so pano po bigyan ang mga supervisor
What a crappy instruction. Use iptables to block URLs. If your router can't do that, you buy a router like Linksys with DD-WRT firmware. The problem is: Facebook has more than 3 IPs. And it also change.
+MrPowerm oh nice comment you have. Thanks