Re: [squid-users] blocking gtalk from gmail (https)

From: Leonardo Carneiro <lscarneiro_at_veltrac.com.br>
Date: Mon, 10 Aug 2009 08:32:14 -0300

It is possible, but you'll need squid + firewall (iptables in my case)

Rules i used in iptables:

    iptables -A FORWARD -p tcp -m tcp --dport 5222 -j DROP
    iptables -A FORWARD -p tcp -m tcp -d 72.14.217.189 -j DROP

Acl i'd blocked in squid:

    acl gtalk url_regex -i .*talk.google.com .*chatenabled.mail.google.com

By some reason, some users still can connect using the executable
client. I'll try to debug this later.

Amos Jeffries escreveu:
> Yatin Shah wrote:
>> I searched alot to find the solution but could not get any working
>> answer. How to block gtalk from google mail without blocking gmail
>> itself. We are able to do it for http://gmail.com but not successful
>> for https://gtalk.com.
>
> May or may not be possible. With HTTPS all Squid has to decide with is
> the domain name.
> From the above you should be able to block CONNECT to .gtalk.com
>
> If that does not work please show what you ave tried, etc.
>
> Amos

-- 
*Leonardo de Souza Carneiro*
*Veltrac - Tecnologia em Logística.*
lscarneiro_at_veltrac.com.br <mailto:lscarneiro_at_veltrac.com.br>
http://www.veltrac.com.br <http://www.veltrac.com.br/>
/Fone Com.: (43)2105-5601/
/Av. Higienópolis 1601 Ed. Eurocenter Sl. 803/
/Londrina- PR/
/Cep: 86015-010/
	
Received on Mon Aug 10 2009 - 11:32:36 MDT

This archive was generated by hypermail 2.2.0 : Mon Aug 10 2009 - 12:00:15 MDT