How can I stop https filter bypass?

[Chris Thomas]

I tried to stop my brother from accessing Youtube by adding Facebook to the blocked hosts lists

I recently found out that my brother is using https://www.youtube.com to bypass the restriction

How do you stop this?

[DavidR]

Well if you a) give him a limited user account and b) just enter this line in the HOSTS file 127.0.0.1 youtube.com. I believe that by blocking the domain and not the full url that should block even the https linking.

Or you could try blocking the IP addresses for youtube (see the list below) as that shouldn't even consider the https aspect.

66.102.9.91 66.102.9.93 66.102.9.190 66.102.9.136

[nmb]

Hi,

Blocking the access is one way of doing, Chris. The other way is to teach them whats good and bad. By blocking access you are only making him search for a new things which can break your block. So just give him the right knowledge buddy.

nmb

[Asyn]

Or you could try blocking the IP addresses for youtube (see the list below) as that shouldn't even consider the https aspect.

66.102.9.91 66.102.9.93 66.102.9.190 66.102.9.136

If you really want to block your brother, you probably will have to block the whole NetRange...!!!
66.102.0.0 - 66.102.15.255
asyn

[DavidR]

Your at it again, offering suggestions that can screw things up for a user - You really have to exercise more care.

That is a massive range of IP that encompasses more than just youtube but a huge chunk of google.

OrgName:    Google Inc.
City:       Mountain View
StateProv:  CA
PostalCode: 94043
Country:    US

NetRange:   66.102.0.0 - 66.102.15.255
CIDR:       66.102.0.0/20
NetName:    GOOGLE-2
NetHandle:  NET-66-102-0-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.GOOGLE.COM
NameServer: NS2.GOOGLE.COM
NameServer: NS3.GOOGLE.COM
NameServer: NS4.GOOGLE.COM

[Asyn]

That is a massive range of IP that encompasses more than just youtube but a huge chunk of google.

Who needs google, anyway..!!?
asyn

[nmb]

Who needs google, anyway..!!?

You don't know the power of google. 

nmb

[DavidR]

That is a massive range of IP that encompasses more than just youtube but a huge chunk of google.

Who needs google, anyway..!!?
asyn

You really don't get it, this is a support forum not a chat room, you have to exercise care when giving advice that may adversely a users system and making a joke about your cock up doesn't make it any better 

[YoKenny]

That is a massive range of IP that encompasses more than just youtube but a huge chunk of google.

Who needs google, anyway..!!?
asyn

You really don't get it, this is a support forum not a chat room, you have to exercise care when giving advice that may adversely a users system and making a joke about your cock up doesn't make it any better 

Asyn is good at giving advice that's not quite correct:
http://forum.avast.com/index.php?topic=61177.msg516754#msg516754

[Chris Thomas]

Well if you a) give him a limited user account and b) just enter this line in the HOSTS file 127.0.0.1 youtube.com. I believe that by blocking the domain and not the full url that should block even the https linking.

Or you could try blocking the IP addresses for youtube (see the list below) as that shouldn't even consider the https aspect.

66.102.9.91 66.102.9.93 66.102.9.190 66.102.9.136

Thanks everyone for your advise

It is better to smoke cocaine than watch Youtube 

It is highly addictive for some

I am not allowing my brother to watch Youtube because he gets addicted. He tells me he need 1 hour for Youtube, but this 1 hour become 2 then 3 and 4

I don't want him to spent much time watching weird clips ( most of Youtube is Junk)

@ David

I have already given him a standard account

I tried to block HOSTS file 127.0.0.1 youtube.com via Hostsman but I couldn't block the https aspect

It seems starting with https can unblock most sites if the Firewall used for filtering doesn't scan SSL

There is an option in K9 Web Protection for this and I found success with it

EDIT:

It seems I can unblock some banned sites in this country by starting the web address with https if the web site uses SSL

[Lisandro]

There is an option in K9 Web Protection for this and I found success with it

You can block both HTTP and HTTPS with K9. Great filter.