dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
411
share rss forum feed


DelmarPip
Premium
join:2011-10-15
Brownsville, TX

did you know routers cant block https address ?

i jsut found out cuz i tried block some wierd crap and some ad sites use the http thing to bypass the router wtf is happening



nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
kudos:7
Reviews:
·AT&T U-Verse

1 recommendation

Well, they can. There's nothing special about https addresses that would prevent them being blocked. Perhaps some routers don't provides support for that.

What they cannot do, is block/filter based on content. Then cannot scan the traffic for porn and block on that. This is because the encryption prevents the router from seeing the data being transmitted. It can only see an encrypted version, and you cannot tell what kind of data it is from the encrypted version.
--
AT&T Uverse; 2Wire 3800-HGV router; openSuSE factory; KDE 4.13.80; firefox 31.0


HELLFIRE
Premium
join:2009-11-25
kudos:18

1 recommendation

reply to DelmarPip

Technically that's correct... a router ROUTES traffic at layer 3 / IP addresses. HTTPS is a layer 7 protocol,
according to the OSI stack.

Exactly what are you trying to do, or expect your router to do? Can you clarify further?

Regards



DelmarPip
Premium
join:2011-10-15
Brownsville, TX

1 edit

i was trying to block an image that was preventing the tv browser from loading the requested page and the stupid router couldnt block it becuz the url is https if you want the link i was trying to block i can provide it

edit the link do not click it

»img341.imageshack.us/img341/3123/cgw.jpg



Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON
kudos:10
Reviews:
·TekSavvy DSL
·Bell Fibe

2 recommendations

reply to DelmarPip

HTTPS is encrypted traffic. Typical sub $500 SOHO router does not have encrypted traffic inspection capabilities. As such you can't block individual elements (such as jpg in your case). You can't even block imageshack.us by it's name, but you can block it by it's corresponding IP(s) or destination port 443. Or use DNS blocking service such as openDNS to block entire site.

You'd need more sophisticated (and typically more expensive) router with SSL inspection capabilities.