How to block port and ip Router 2900

[rodrigo.moreira5]

Hello,

I'm trying to block Spotify in mi company. I can block the HTTP but https is steel working, so I need to block this with the port and ip, what it's the command to get this?

Thanks,

[rikshit4aggarwal]

if you use proxy, then perhaps you can block this application there

Regards,

Rikshit

[rodrigo.moreira5]

Hello, Rikshit.

I don't have a proxy, I try to block this in the router per command line

[rikshit4aggarwal]

try this

class-map match-any MUSIC_SITES
match protocol secure-http

or you can match based on contents of url, this will block both http and https

class-map match-any MUSIC_SITES
match protocol http url "*spotify*"

policy-map M_SITES
class MUSIC_SITES
drop

service-policy out (INTERNET INTERFACE)

[rodrigo.moreira5]

I try with this command but HTTPS still working.

[rikshit4aggarwal]

Proxy and Firewall are the only solutions as far as I know..The above commands were available in Internet and even I was not sure if they will work. Sorry..

Regards,

Rikshit

[rodrigo.moreira5]

Ok, Thankss rikshit.

so only with server proxy.

[rodrigo.moreira5]

What proxy recommend you ? Squid + Squidguard?

[rikshit4aggarwal]

Perhaps you can doing "nslookup www.spotify.com" and then block the IP adresses using an ACL.

Check this link :

http://www.techrepublic.com/article/block-access-to-a-web-site-using-the...

We use Sophos proxy . I don't know about squid

Regards,

Rikshit

[rikshit4aggarwal]

Perhaps you can doing "nslookup www.spotify.com" and then block the IP adresses using an ACL.

Check this link :

http://www.techrepublic.com/article/block-access-to-a-web-site-using-the-cisco-ios/

Regards,

Rikshit