Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[delphiguy]

Good day, my boss asked me to disable access to Facebook since most of the employees are just spending
time with it instead of working.  I have done this by means of Website Filter and it works.  However, some
people have found a way by installing Digsby on their machine, tho they're not really able to go the
facebook page, they are actually able to chat with their facebook buddies.  Is there a way for me to block
access to the facebook API or anything Facebook related? thanks.

[FurryNutz]

I think you'll need to find the FB port that Digsby uses and block that port.

[delphiguy]

Well I can see by using TCPView that Digsby is connecting to this sites:
api-10-04-snc4.facebook.com
api-10-04-snc4.facebook.com
jabber-02-01-ash3.facebook.com

So I assume that its where the Facebook API is located.  However, when I put that to the Website Filter
Digsby will just connect to another site... it seems that it has a list of Facebook sites where it can connect
if one fails.  So Im wondering if there could be a way to just block any url that contains facebook.

Thanks.

[FurryNutz]

You need to find the beginning and ending IP and or port ranges that FB uses and try to put them into the routers filter options, i.e. ##.###.###.### - ##.###.###.### or for ports, ####-####.

[Hard Harry]

Umm, not to state the obvious, but can you just say stop or your fired? Flex your IT muscle. :-) Is this a small buisness?

Sounds like basically they are using a proxy redirect. A IP block won't stop it, and neither will a domain. Might be able to put certian local restrictions that will stop them from signing into the site, but stopping them from viewing it is pretty hard. You could set set a static DNS dyndns.com but you need a pro account. Its only 15$ a year, so not that bad. Then you would have better control and be able to insert wildcards in your domain blocks. Like block anything that had the word facebook in it. But then they could use Tor...and then the arms race would start.

Basicaly, get your HR to write up a fair use internet agreement. Have them sign it. 3 strikes your out.

[delphiguy]

I've tried blocking a bunch of IP's already although now it takes a whiel for Digsby to connect eventually its still
able to.  Any ideas as to how to get the Ip's/Ports? at the moment I have these IP's blocked but it seems that
its not enough.

199.59.148.88-199.59.148.88,*,173.223.232.154-173.223.232.154,66.220.1.1-66.220.255.255,129.21.160.42-129.21.160.66

[Hard Harry]

The ranges I see listed are

66.220.144.0 - 66.220.159.255
69.63.176.0 - 69.63.191.255
204.15.20.0 - 204.15.23.255