Topic: Block Dropbox

[Nokia390]

Hi
I need to block dropbox. I try with dansguardian but no success.
It´s possible to block with iptables?
Tx

[Stefano]

hi

I think you should search elsewhere (google is the first place) then come back here with more info.. we then will help you to do it

[Nokia390]

That´s what i have being doing, but no success

Dropbox use TCP port 443 (HTTPS)
208.43.202.0/24



But i can´t block https sites like https://facebook.com with dansguardian

[Stefano]

since you can't block https traffic, I guess you could block traffic to their ip range..

[Nokia390]

I block all ip range (dropbox) but still users can login

[Stefano]

well.. this is what I see on my laptop:

Code: [Select]

tcp       38      0 192.168.25.4:39251      199.47.216.172:443      CLOSE_WAIT  1551/dropbox   
tcp        0      0 10.0.0.100:51423        199.47.217.148:80       ESTABLISHED 1551/dropbox   
tcp        0      0 192.168.25.4:36836      199.47.217.148:80       ESTABLISHED 1551/dropbox

as you can see the target ip is different from the one you posted..

since you're using dansguardian, following the advice you can find here you could block *.dropbox.com

let us know

[Nokia390]

ok
Thanks
I´m go to try

[Nokia390]

i had
*.dropbox.com
dropbox.com
to blocksitelist but still pass

[Stefano]

ok.. playing a bit here on ubuntu.. blocked dopbox blocking

199.47.217.0/24
208.43.202.0/24
107.20.249.0/24

you should search a bit to refine the ip ranges to block, otherwise you could block other sites too

[Nokia390]

Thanks for your patience, I'll try
 Thank you very much

[Nokia390]

Only block by:

iptables -t nat -I PREROUTING -p tcp --dport 443 -j DROP

but block ALL https sites

can i specify one? like https:\\facebook.com?

Tx

[Brave Dave]

I haven't tried this with dropbox, but used it with logmein and others

add dropbox to your domains (through the server-manager) - maybe thats dropbox.com - that way your machine will think it's dropbox.com

maybe tail your dnslog to see what dropbox hosts are being resolved

[Nokia390]

Tx I´ll try.

[janet]

Brave Dave, Nokia390

add dropbox to your domains (through the server-manager)

Yes tested and confirmed that adding dropbox.com as a Domain in server manager Domains panel will block access, be sure to select Resolve locally
This "feature" should work for any domain.
Restart your workstation to take affect.

[Nokia390]

simple and efficient, thank you very much.