Content Filter HTTPS SSL Redirect Not Working

Support
1

Hi Everyone,

I have setup the Nethserver Content Filter and it works perfectly for HTTP but not HTTPS sites. When someone tries to access a blocked HTTPS site, they get a SSL Certificate error rather than getting redirected to the reason for the block of the site.

Obviously this can be confusing for the end user. I have read numerous forum posts and articles outlining how this can be rectified, but non of them work in my case and most seem to contradict each other.

Can someone please direct me to the definitive “How To” doc to get this to work?

The setup is as follows:

Nethserver: 192.168.10.125/24
Neth DNS: 8.8.8.8 and 8.8.4.4
Nethserver has a valid Let’s Encrypt Certificate for it’s hostname of gw.office.domain.com

Client PCs:
IP: 192.168.10.0/24
DNS: 192.168.10.3 (Win 2016 DNS Server)
GW: 192.168.10.125 (Nethserver)

Win 2016 Server:
IP: 192.168.10.3/24
DNS: 192.168.10.3
GW: 192.168.10.125
DNS Server Service: Has 192.168.10.125 as the Forwarder

Many thanks

Duke

2

Known limitations

  • Transparent URL filtering on HTTPS websites can only block whole domains, because ufdbGuard can only receive the domain name, not the full URL

  • Redirected HTTPS show an error instead of the block page

…due to peek and splice mode:

2 Likes