Bannergatta proxy IDS in one bottle?

What would you recommend to put on dev. The meaning of the maximal cut different ads like "Soda is the answer" and other slag. The network is under full control, and I want to cut this whole mess on tablets and mobile. Therefore, it is important SSL traffic. There is such a thing?

pfsense is also ?
Nginx + scripts ?
April 4th 20 at 13:13
1 answer
April 4th 20 at 13:15
Solution
squid. C bumping and girls.

Nothing else is able to do MitM (and need to do it) to hit an https connection, I don't know. It certainly does not mean that it can not be - maybe there are, but I do not know. Bannergatta there is on the ACL.

pfsense is also - the firewall on the basis of FreeBSD
nginx - http server, reverse proxy, mitm but he can not, as far as I know.

In the "System administrator" somewhere towards the end of last year there was an article about configuring squid with bumping.
@dario.Ryan this and tend. Blacklist what news? In principle, the bump is not particularly necessary, the certificate and the proxy server will hand out via DHCP - kameron_Murazik commented on April 4th 20 at 13:18
@kameron_MurazikWithout bumping https is not open. And without opening the https will not be the real control connection. For example, I go to mail.ru - on the root website with the news. And inside connections, which cannot be seen without bumping - turn on video.mail.ru or Dating. Not having SMP hell this track.
A list of URLs I keep in simple text files. Is squidGuard, I don't know how much truth is he is alive :) - dario.Ryan commented on April 4th 20 at 13:21

Find more questions by tags ProxyIntrusion detection systems