So are there any ways to block facebook.com outside the facebook.com domain?
I need a souliton that's not "webbrowser related" - no Add-on, so e.g.: a Privoxy rule.
It would still not work on HTTPS sites, only on HTTP, ok, but I still need this rule, but I don't have a clue what it is. Does anybody has?
on a desktop PC/Fedora 15
So I don't want to block facebook.com. I just don't want that that e.g.: if there is a foo.org that has a
Assuming you have access to your firewall, You can just block Facebook's prefixes. You can find out their ASN from traceroute:
$ traceroute -n -A www.facebook.com .... 14 18.104.22.168 [AS3356] 630.713 ms 633.180 ms 22.214.171.124 [AS3356] 629.633 ms 15 126.96.36.199 [AS3356] 578.959 ms 580.703 ms 579.624 ms 16 188.8.131.52 [AS32934/AS10753] 577.604 ms 557.247 ms 636.807 ms 17 184.108.40.206 [AS32934] 633.454 ms 220.127.116.11 [AS32934] 602.556 ms 603.583 ms 18 18.104.22.168 [AS32934] 634.461 ms 22.214.171.124 [AS32934] 634.431 ms 126.96.36.199 [AS32934] 702.079 ms 19 188.8.131.52 [AS32934/AS10753] 701.423 ms 700.644 ms 700.937 ms
Which you can verify with tools such as these
$ dig +short AS32934.asn.cymru.com TXT "32934 | US | arin | 2004-08-24 | FACEBOOK - Facebook, Inc."
Then you'd get their prefixes using a lookup service
$ lynx --dump https://www.dan.me.uk/bgplookup?asn=32934 2>&1 | grep AS32934 IPv4 Prefixes seen at AS32934: 184.108.40.206/22 [AS32934] 2620:0:1c00::/40 [AS32934] 220.127.116.11/21 [AS32934] 18.104.22.168/21 [AS32934] 22.214.171.124/24 [AS32934] 126.96.36.199/20 [AS32934] 188.8.131.52/24 [AS32934] 184.108.40.206/20 [AS32934] 220.127.116.11/24 [AS32934] 18.104.22.168/21 [AS32934] 22.214.171.124/21 [AS32934] 126.96.36.199/22 [AS32934]
You can then feed the prefixes into your firewall.
Of course, If I am a determined user, I could use any of the free proxies out there rendering this whole post moot.