05-20-2020 09:46 PM
Ok, the task is stimple. I want to allow only one particular URL accessible from youtube. Let's say the URL is this:
https://www.youtube.com/watch?v=-RyESqegW9Y&
I created a custom URL category and put this URL into it: *.youtube.com/watch?v=-RyESqegW9Y
SSL decryption is enabled and working in my network.
I created another Custom URL category that has this list of URLs. This category will be sitting in the blocking rule.
youtube.com/watch
youtube.com/embed
www.youtube.com/watch
www.youtube.com/embed
*.youtube.com/watch
*.youtube.com/embed
I created 3 rules:
1: Allow youtube application to the permitted URL catergory (the first one).
2. Block everything that falls into the second Custom URL
3. Allow everything else. That "everything else" rule has URL-filtering enabled where the second custom-URL is set to "block".
Logically everything looks correct.
Now when I go to youtube first time from a newly opened firefox browser, everything is appearing fine. You can open youtube site, but can't open any video except the permitted one. The certificate is appearing issued by me, all good.
But then here is a workaround that just driving me nuts and I don't get how this happens:
If you go to any channel that has a built-in auto-play video in its splash page (like this: https://www.youtube.com/channel/UCLBzF3SZoIccFEpNaYa1E6Q) - you will see the video is being played. If I open this video full-screen, watch for few seconds and then return back to normal mode, i can watch any video on youtube after that. I noticed that sometimes the certificate is no longer being replaced by own, but sometimes it's still my cert being used.
There is nothing meaningful in the logs. Url-filtering just doesn't show anything like I've never gone to the blocked resource, the traffic log sometimes show few incomplete and non-decrypted packets that falls into the blocking rule, and then there is traffic successfully going from google-video servers that falls into streaming-media category and youtube-streaming app.
Sometimes it just starts working by itself. But then you just go to those bloody hamsters channel, and after watching a video on this channel no blocks seem to be enabled again. Just watch any video on this channel and have full access to all youtube videos after that
So, what the hell is going on? How to block youtube ?
Thanks!
