Roland Roland wrote:
Hello,
for a while now.. almost 3 weeks I've been using an ACL tht matches a
specific file content with url_regex
in this file there's facebook, and a few other sites that I don't want
users to access.
users have found a way to bypass these restrictions
by using online sites that supports such a thing.. like using google
translate service to translate sites which by default would be blocked..
or simply using other online websites that masks such a usage...
anyone has a better way for me to block such sites?
thanks in advance,
Roland
You have entered into an arms race with your users. This particular race
is one which network admin often try and there is no known way to win
short of shutting down the network. Have you considered that even P2P
instant messengers can transfer HTML content in their messages? or
emails?. Any given packet on your network may or may not contain what
you think it does.
My advice: don't block. Fight social networking with social responses.
Use delay pools to rate-limit the amount of access they get to those
sites and when. Youtube videos downloading at 2KB/sec are not that
appealing to watch. Facebook pages that take 5 minutes to post a 2-line
comment are not that interesting.
If you are in a company situation a 'top ten non-working employees' can
do wonders. Log and measure how much time each employee is spending on
these sites and make it known. Which sites and how long. That also gives
the policy makers some ammo if they really want to act on it.
Amos
--
Please be using
Current Stable Squid 2.7.STABLE6 or 3.0.STABLE16
Current Beta Squid 3.1.0.9
