OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: MiMarGa on March 17, 2020, 05:05:27 AM

Title: Why Alias can't block YouTube
Post by: MiMarGa on March 17, 2020, 05:05:27 AM
I use an alias to block YouTube, but after I try it on the firewall, why can't I block it?
please the instructions, how can I block youtube for certain IP. Thanks
Title: Re: Why Alias can't block YouTube
Post by: Amr on March 26, 2020, 12:56:15 PM
well, the bad news is that: long story short, you can't block youtube through firewall aliases (unless you got much time, patience and technical knowledge to enter every single IP youtube uses).
see this link for reference: https://forum.opnsense.org/index.php?topic=5279.0 (https://forum.opnsense.org/index.php?topic=5279.0).

The good news is that there's a couple of solutions Depending :

1- Use DNS to block access to youtube which is simple enough to do, but users can use VPN to access blocked websites.

2-Use IPS (Intrusion prevention system) deep packet inspection to block certain websites and VPN but it's hard and not fail-proof.

3- Ideally use a transparent proxy server to filter traffic and block VPN for good (again this isn't for the faint of the heart).

You should study your case and choose the appropriate solution.


Title: Re: Why Alias can't block YouTube
Post by: MiMarGa on April 03, 2020, 06:51:38 AM
Quote from: Amr on March 26, 2020, 12:56:15 PM
well, the bad news is that: long story short, you can't block youtube through firewall aliases (unless you got much time, patience and technical knowledge to enter every single IP youtube uses).
see this link for reference: https://forum.opnsense.org/index.php?topic=5279.0 (https://forum.opnsense.org/index.php?topic=5279.0).

The good news is that there's a couple of solutions Depending :

1- Use DNS to block access to youtube which is simple enough to do, but users can use VPN to access blocked websites.

2-Use IPS (Intrusion prevention system) deep packet inspection to block certain websites and VPN but it's hard and not fail-proof.

3- Ideally use a transparent proxy server to filter traffic and block VPN for good (again this isn't for the faint of the heart).

You should study your case and choose the appropriate solution.

thank you