<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2528 " id="quads-ad2528" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<h2 class="wp-block-heading"><strong>How to Block Facebook on HTTPS on Squid proxy server without importing IPS/CIDR or configure Clients browsers for the Proxy settings using the WPAD Autodiscover for Squid feature</strong></h2>



<p><strong>Note:</strong></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2525 " id="quads-ad2525" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2529 " id="quads-ad2529" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2530 " id="quads-ad2530" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<p>Before you begin reading this article, you must have the proxy filter configured to deny SocialNet in the blacklist in Service / Proxy Filter / Common ACL<strong><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb-1.png?attredirects=0"></a></strong><strong><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb-2.png?attredirects=0"></a></strong></p>



<p>In order to block Facebook or any other website on HTTPs protocol on pfsense (SQUID) without finding all the CIDR or IPs to block facebook or any other website&#8217;s IPs we will have to use the Squid proxy&#8217;s Autodiscover feature which uses Wpad file .. Let&#8217;s say similar to how Exchange uses Autodiscover&#8217;s XML file.</p>



<h2 class="wp-block-heading"><strong>Prerequisites</strong></h2>



<ol class="wp-block-list"><li>In order to block sites on HTTPS you will need to have SQUID Guard proxy installed and configured on Pfsense. If you don&#8217;t know how you can look it up ;<a href="http://old.moh10ly.com/blog/pfsense/setup-squid-guard-proxy-server-on-pfsense">here</a>. ;</li><li>In order to use this feature you will have to disable the transparent mode on Squid server, To do so navigate to proxy server under the Services Menu then Proxy Server then un-tick the ;<strong>Transparent HTTP proxy.</strong></li><li>You will need to have the DHCP server up and running and you will need to create a DHCP option 252 that will provide the HTTP path to the files that we will create further on.</li><li>DNS Server configured for the domain in order to add a required A record value for the wpad. The clients are going to look that up through the DHCP option mentioned in step 3.</li></ol>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb1.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb1.png" alt=""/></a> 

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2523 " id="quads-ad2523" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
 
</figure>



<h2 class="wp-block-heading"><strong>Autodiscover Files</strong></h2>



<p>Then we will have to create the following files in Notepad and save each of them with a specific extension as in the below snapshot</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb2.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb2.png" alt=""/></a></figure>



<p>The 3 files contain the same contents inside them &#8220;This is a single file with a JavaScript function which tells the browser how to find a proxy hostname and port&#8221; which is ;Squid Proxy server&#8217;s IP or Pfsense&#8217;s IP, I will open one of them and show you how I have configured this file.</p>



<p>Note: ;The IP 10.10.0.155 represents my proxy server (PFsense in this case) ;which has Squid installed and configured on it.</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb3.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb3.png" alt=""/></a></figure>



<p>Once these files are saved, I will use a very simple HTTP server tool to host them on any of my servers on a specific port which clients can reach without any problem. My favorite tool is HFS which you can download from here</p>



<p><a href="http://www.rejetto.com/hfs/">http://www.rejetto.com/hfs/</a></p>



<h2 class="wp-block-heading"><strong>Web Server Configuration</strong></h2>



<p>After ;running the HFS appliaction I will run it on the port 8085 and load all the files as in the following snapshot</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb4.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307023/blog/pfsense/block-facebook-on-pfsense/blkfb4.png" alt=""/></a></figure>



<p>You can simply load the files by dragging and dropping them under the &#8220;Virtual File System&#8221; on the right pane.</p>



<h2 class="wp-block-heading"><strong>DNS Configuration</strong></h2>



<p>Once this is done we will have to configure the WPAD record on our DNS server with A record pointing to the server where the files are hosted &#8220;In my case I have installed the HFS on the AD/DNS server&#8221; that has the IP 10.10.0.150</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb5.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307023/blog/pfsense/block-facebook-on-pfsense/blkfb5.png" alt=""/></a></figure>



<p>Next I will go the client and check if I can resolve this wpad … ;</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb6.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307023/blog/pfsense/block-facebook-on-pfsense/blkfb6.png" alt=""/></a></figure>



<p>I have tried to resolve the name but apparently the nslookup is not finding the record that I have created although it&#8217;s in the DNS, I have tried ipconfig /flushdns, tried restarting the DNS service but nothing solved the problem</p>



<p>Lastly I went to the DNS logs and checked if there&#8217;s anything worth noticing there and here&#8217;s what I got Error event ID 7600</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb7.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307023/blog/pfsense/block-facebook-on-pfsense/blkfb7.png" alt=""/></a></figure>



<p>Googling online with this error got me to this Microsoft KB</p>



<p><a href="http://support.microsoft.com/kb/2003485/en-us">http://support.microsoft.com/kb/2003485/en-us</a></p>



<p>All I had was to open registry editor and delete the wpad key from the GlobalQueryBlockList value as following</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2531 " id="quads-ad2531" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb8.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307023/blog/pfsense/block-facebook-on-pfsense/blkfb8.png" alt=""/></a></figure>



<p>Here is what it looks like after deleting the wpad</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb9.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307023/blog/pfsense/block-facebook-on-pfsense/blkfb9.png" alt=""/></a></figure>



<p>Click Ok and make sure you Restart the DNS Server.</p>



<p>On the client I will flush the DNS cache and do another nslookup attempt.</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb10.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb10.png" alt=""/></a></figure>



<h2 class="wp-block-heading"><strong>DHCP Server configuration</strong></h2>



<p>the DHCP server&#8217;s options as required in the prerequisites earlier. I have my DHCP configured on Pfsense server and now I will configure the DHCP as following.</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb11.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb11.png" alt=""/></a></figure>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb12.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb12.png" alt=""/></a></figure>



<p>Here I have clicked on Advanced next to the &#8220;Additional BOOTP/DHCP options and in Number I entered the DHCP option that I would like to configure and chose String since it&#8217;s WPAD. And on the value side I entered the path for the Wpad URL where I ran the HFS application and made sure it&#8217;s accessible by clients.</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb13.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb13.png" alt=""/></a></figure>



<p>Next I saved everything and will go to both the HFS to monitor clients activity if they are requesting the file or not and I will go the client and request Facebook on HTTPS.</p>



<h2 class="wp-block-heading"><strong>Note:</strong></h2>



<p>In order for the autodiscover (Wpad) feature to work your Internet explorer/Firefox must be set to use the Audo detect settings.</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb14.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb14.png" alt=""/></a></figure>



<p>On the HFS Server (My AD) I will look up for any logs that will be reported once I start browsing. Now it&#8217;s empty</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb15.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb15.png" alt=""/></a></figure>



<p>I will go back to the client and browse Google for example.</p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb16.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb16.png" alt=""/></a></figure>



<p>Here, I have tried on the client side to open Facebook on https but it didn&#8217;t work but other websites are working just fine! ;<br></p>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb17.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb17.png" alt=""/></a></figure>



<figure class="wp-block-image"><a href="http://old.moh10ly.com/blog/pfsense/block-facebook-on-pfsense/blkfb18.png?attredirects=0"><img src="http://old.moh10ly.com/_/rsrc/1431547307022/blog/pfsense/block-facebook-on-pfsense/blkfb18.png" alt=""/></a></figure>



<p>What happened on the HFS server is that the client on Internet Explorer has requested the file &#8220;Proxy.pac&#8221; file for the settings which means that all of our settings are working properly.</p>



<p>Note:</p>



<p>The only thing I have done on the Proxy Filter to disable Facebook was to Socialnet which includes all the social media websites. In case you want to block only Facebook and leave twitter you will have to extract the blacklist and create your own facebook folder and text file to include all the facebook URLs and then upload it to your own FTP or web server.</p>



<p><a href="http://www.shallalist.de/Downloads/shallalist.tar.gz">http://www.shallalist.de/Downloads/shallalist.tar.gz</a></p>



<p><strong>Reference:</strong></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2526 " id="quads-ad2526" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<p><a href="https://doc.pfsense.org/index.php/WPAD_Autoconfigure_for_Squid">https://doc.pfsense.org/index.php/WPAD_Autoconfigure_for_Squid</a></p>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2522 " id="quads-ad2522" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>


Reset and manage your Active Directory users' Passwords Active Directory is one of the most…
Finding Exchange Database hidden mailboxes. Story:Maybe you have been in this situation before, trying to…
If you're using a Proxy server in your firewall or in your network and have…
Story:I got some clients that have reported some of their users being locked out and…
Delegate Permissions This is a code that I have wrote recently to check if an…
Story: I got a request from a client who constantly gets CVs and have to…