New to NXfilter - Filtering HTTPS

[Rex Prince]

Hello all, I just put together a Guest Network and installed a DHCP Server that is also running NXfilter. Everything is working fine, except sites using HTTPS are not being blocked or getting the quota. ie: https://neflix.com. I'm using the trial of jahalist right now.

Since this is a guest network, I am not using AD and anyone using this network should receive the same policy, so no authentication or different policy groups are needed.

Also, the sever is Server 2008 running ie 10, and the dynamic menues in NXfilter do not expand.

Anyway, please let me know how I can block Netflix and other HTTPS sites and is there a browser setting for opening dynamic menues?

Thanks!

[Jinhee]

We block it on DNS level. So there's no difference between HTTP and HTTPS. If you can block http://netflix.com you should be able to block https://netflix.com. Do you see the block log for Netflix on your log-view? Are you not talking about you just don't see the block-page on HTTPS? In that case read this,

  http://nxfilter.org/tutorial.html#hide_ssl

[yahav a]

Hi
Can you block item in https web site
Like video or pictures on facebook ?

[Jinhee]

You can't block it URL level with NxFilter as it's basically working on DNS level. However, these websites mostly use a separated domain to upload those video files. So if it's separated on another domain block that domain.

[jeroen...@gmail.com]

Have you checked if DHCP server is not setting a (diffrent) ip6 dns to the clients?

Tried enabling authentication in NXfilter?

Tried blacklisting *.netflix.com?

On the client do nslookup. Does it have nxfilter as dns? lookup netflix.com. Your dns should respond with the nxfilter ip.

For the NXfilter website: put you ie11 browser in compatibility mode.

[jeroen...@gmail.com]

have a look @ privoxy.

This can filter on url, but it requires your clients to have set a proxy if not used in transperant mode on your gateway/router.