RE: blocking https

[jim () openanswers co uk]

> Blocking all would be a simple matter of closing outbound connections to
> port 443.  If you want to block specific https sites you would have to
> pair
> up port 443 with that site's ip address.  The tricky part comes in when
> sites use caching (Akamai) or round robin dns..
>
> Mike Fetherston

A better solution would be to pass all outgoing requests through a web
proxy. Most decent web proxies will allow rules to be set up based on
hostnames, avoiding the issue of matching IP addresses to the sites in
question.

Regards,
Jim Halfpenny