How can I stop https filter bypass?

General Topics
1

I tried to stop my brother from accessing Youtube by adding Facebook to the blocked hosts lists

I recently found out that my brother is using https://www.youtube.com to bypass the restriction

How do you stop this?

2

Well if you a) give him a limited user account and b) just enter this line in the HOSTS file 127.0.0.1 youtube.com. I believe that by blocking the domain and not the full url that should block even the https linking.

Or you could try blocking the IP addresses for youtube (see the list below) as that shouldn’t even consider the https aspect.

66.102.9.91 66.102.9.93 66.102.9.190 66.102.9.136

3

Hi,

Blocking the access is one way of doing, Chris. The other way is to teach them whats good and bad. By blocking access you are only making him search for a new things which can break your block. So just give him the right knowledge buddy.

nmb

4

If you really want to block your brother, you probably will have to block the whole NetRange…!!!
66.102.0.0 - 66.102.15.255
asyn

5

Your at it again, offering suggestions that can screw things up for a user - You really have to exercise more care.

That is a massive range of IP that encompasses more than just youtube but a huge chunk of google.

OrgName: Google Inc. City: Mountain View StateProv: CA PostalCode: 94043 Country: US

NetRange: 66.102.0.0 - 66.102.15.255
CIDR: 66.102.0.0/20
NetName: GOOGLE-2
NetHandle: NET-66-102-0-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.GOOGLE.COM
NameServer: NS2.GOOGLE.COM
NameServer: NS3.GOOGLE.COM
NameServer: NS4.GOOGLE.COM

6

Who needs google, anyway…!!? :wink:
asyn

7

You don’t know the power of google. :wink:

nmb

8

You really don’t get it, this is a support forum not a chat room, you have to exercise care when giving advice that may adversely a users system and making a joke about your cock up doesn’t make it any better ::slight_smile:

9

Asyn is good at giving advice that’s not quite correct:
http://forum.avast.com/index.php?topic=61177.msg516754#msg516754

10

Thanks everyone for your advise

It is better to smoke cocaine than watch Youtube ;D

It is highly addictive for some

I am not allowing my brother to watch Youtube because he gets addicted. He tells me he need 1 hour for Youtube, but this 1 hour become 2 then 3 and 4

I don’t want him to spent much time watching weird clips ( most of Youtube is Junk)

@ David

I have already given him a standard account

I tried to block HOSTS file 127.0.0.1 youtube.com via Hostsman but I couldn’t block the https aspect

It seems starting with https can unblock most sites if the Firewall used for filtering doesn’t scan SSL

There is an option in K9 Web Protection for this and I found success with it

EDIT:

It seems I can unblock some banned sites in this country by starting the web address with https if the web site uses SSL

11

You can block both HTTP and HTTPS with K9. Great filter.