How to block facebook access

[Mire, John]

> -----Original Message-----
> From: owner-freebsd-questions at freebsd.org [mailto:owner-freebsd-
> questions at freebsd.org] On Behalf Of Adam Vande More
> Sent: Tuesday, August 22, 2017 19:08
> To: Ernie Luzar <luzar722 at gmail.com>
> Cc: freebsd-questions at freebsd.org
> Subject: Re: How to block facebook access
> 
> *EXTERNAL EMAIL: EVALUATE*
> 
> On Sat, Aug 19, 2017 at 1:20 PM, Ernie Luzar <luzar722 at gmail.com> wrote:
> 
> > Hello list;
> >
> > Running 11.1 & ipfilter with LAN behind the gateway server. LAN users are
> > using their work PC's to access facebook during work.
> >
> > What method would recommend to block all facebook access?
> >
> 
> Personally I would setup a transparent proxy eg squid and block it using
> that.  DNS solutions are too fragile and something like squid can generate
> comprehensive reports.
> 
> --
> Adam
>
[Mire, John] 
I would agree with Adam, in the past we've used squid with Dansguardian along with a DNS blackhole to control not only DNS but NTP so that AD and Kerberos was in sync across the whole campus.

/john

--
John Mire: jmire at lsuhsc.edu