Topic: How do I block domains/site?

[turtle2472]

I've search but to no avail.  I'm trying to block certain sites from my network and can't seem to figure it out.  Looking through the host names and domains section I'm not seeing what I am looking for.

Here is an example of what I'm trying to do, block my server from ever accessing "myspace.com", "spamadserver.com", etc. 

On my Linksys RV042 I can just list domains and it blocks them.  I am currently using OpenDNS and blocking some of them through that, however I would rather block them locally than though the DNS.  Thanks.

[mmccarn]

You can control browser access to domains using http://wiki.contribs.org/SquidGuard or http://wiki.contribs.org/Dansguardian.

If you need to block other traffic beyond plain http you might be able to do something with http://wiki.contribs.org/P2p.

Lastly, you can block all traffic by IP address using the methods described in http://bugs.contribs.org/show_bug.cgi?id=2977.

I don't know of any easy, non-DNS way to use your SME to simply block all traffic to a specific website or domain. 

You should be able to block external domains pretty well by defining them in 'server-manager' and configuring them to 'resolve locally' - especially if you have the HTTP transparent proxy enabled.

Perhaps a combination of the last option (create fake virtual domains locally) and blocking all outbound DNS queries?

[turtle2472]

Thanks for the great ideas.  Those will work well in conjunction with OpenDNS.

[raem]

turtle2472 & mmccarn

Lastly, you can block all traffic by IP address using the methods described in http://bugs.contribs.org/show_bug.cgi?id=2977.

...and that is in the Firewall wiki
http://wiki.contribs.org/Firewall#Block_outgoing_ports

[turtle2472]

...and that is in the Firewall wiki
http://wiki.contribs.org/Firewall#Block_outgoing_ports

Thanks for that link!

[srobinson]

Here’s how I block sites using SME 7.2.  I’m still new to Linux so the following may not be the best.

echo acl block url_regex \”/etc/squid/block.acl\” >/etc/e-smith/templates-custom/etc/squid/squid.conf/20ACL31block
echo http_access deny block >/etc/e-smith/templates-custom/etc/squid/squid.conf/40http_access21denyBlock
echo .myspace.com >/etc/e-smith/templates-custom/etc/squid/block.acl/10block
echo .spamadserver.com >>/etc/e-smith/templates-custom/etc/squid/block.acl/10block
/sbin/e-smith/expand-template /etc/squid/squid.conf
/sbin/e-smith/expand-template /etc/squid/block.acl
/sbin/service squid restart

If you want to change the list of blocked sites edit /etc/e-smith/templates-custom/etc/squid/block.acl/10block then enter the following:

/sbin/e-smith/expand-template /etc/squid/block.acl
/sbin/service squid restart

To remove the list, delete the custom templates and restart as follows:

rm /etc/e-smith/templates-custom/etc/squid/squid.conf/20ACL31block
rm /etc/e-smith/templates-custom/etc/squid/squid.conf/40http_access21denyBlock
rm /etc/e-smith/templates-custom/etc/squid/block.acl/10block
/sbin/e-smith/expand-template /etc/squid/squid.conf
/sbin/service squid restart

[tariqf]

thanks srobinson, just posting my slightly modified version which worked in sme 7.3 for me

mkdir -p /etc/e-smith/templates-custom/etc/squid/squid.conf
mkdir -p /etc/e-smith/templates-custom/etc/squid/block.acl
echo acl block url_regex ”/etc/squid/block.acl” >/etc/e-smith/templates-custom/etc/squid/squid.conf/20ACL31block
echo http_access deny block >/etc/e-smith/templates-custom/etc/squid/squid.conf/40http_access21denyBlock
echo .facebook.com >/etc/e-smith/templates-custom/etc/squid/block.acl/10block
echo .facebook.co.uk >>/etc/e-smith/templates-custom/etc/squid/block.acl/10block
/sbin/e-smith/expand-template /etc/squid/squid.conf
/sbin/e-smith/expand-template /etc/squid/block.acl
svc -d /service/squid
/sbin/service squid restart

If you want to change the list of blocked sites edit /etc/e-smith/templates-custom/etc/squid/block.acl/10block then enter the following:

/sbin/e-smith/expand-template /etc/squid/block.acl
svc -d /service/squid
/sbin/service squid restart


To remove the list, delete the custom templates and restart as follows:

rm /etc/e-smith/templates-custom/etc/squid/squid.conf/20ACL31block
rm /etc/e-smith/templates-custom/etc/squid/squid.conf/40http_access21denyBlock
rm /etc/e-smith/templates-custom/etc/squid/block.acl/10block
/sbin/e-smith/expand-template /etc/squid/squid.conf
svc -d /service/squid
/sbin/service squid restart

[byte]

Moving this topic to the SME 7.x contribs forum, it is more appropriate there. Thanks!