Blocage parefeu Netflix Résolu

Question

Bonjour,

Je cherche a bloquer le site netflix dans mon entreprise. J'ai donc ajouté a ma règle de blocage parefeu "netflix.com" et cela a fonctionné ................ pendant environ 2 semaines. Le site est a nouveau disponible et impossible de le bloquer même en ajoutant d'autres fqdn netflix a ma liste.

Quelqu'un a déjà eu ce problème ?

madmyke · Answer

Bonjour

Il faut bloquer netflix globalement, puisqu'il n’existe pas que Netflix.com.
De même si vous avez les outils pour, vous devriez pouvoir voir quel trafic entrant passe chez vous ce qui vous permettra de mieux cibler les blocages.

bav

brupala · Answer

salut,
brupala@saturn ~ $ host netflix.comnetflix.com has address 52.49.6.246netflix.com has address 34.251.239.113netflix.com has address 52.16.231.43netflix.com has address 52.30.103.23netflix.com has address 54.154.201.43netflix.com has address 34.246.63.0netflix.com has address 52.31.246.79netflix.com has address 54.171.187.60netflix.com has IPv6 address 2a01:578:3::34d1:4fbanetflix.com has IPv6 address 2a01:578:3::341f:91b7netflix.com has IPv6 address 2a01:578:3::34d1:e0a1netflix.com has IPv6 address 2a01:578:3::341e:2dc6netflix.com has IPv6 address 2a01:578:3::364c:a192netflix.com has IPv6 address 2a01:578:3::364d:8713netflix.com has IPv6 address 2a01:578:3::22f9:7da7netflix.com has IPv6 address 2a01:578:3::341e:80ednetflix.com mail is handled by 1 aspmx.l.google.com.netflix.com mail is handled by 10 aspmx2.googlemail.com.netflix.com mail is handled by 10 aspmx3.googlemail.com.netflix.com mail is handled by 5 alt1.aspmx.l.google.com.netflix.com mail is handled by 5 alt2.aspmx.l.google.com.brupala@saturn ~ $ host netflix.frnetflix.fr has address 52.32.78.165netflix.fr has address 52.32.240.186netflix.fr has address 52.32.140.41netflix.fr has address 50.17.247.31netflix.fr has address 54.89.245.208netflix.fr has address 184.73.192.76netflix.fr has address 52.18.140.121netflix.fr has address 52.16.244.17netflix.fr has address 52.17.14.207brupala@saturn ~ $ host netflix.orgnetflix.org has address 52.32.78.165netflix.org has address 52.32.240.186netflix.org has address 52.32.140.41netflix.org has address 50.17.247.31netflix.org has address 54.89.245.208netflix.org has address 184.73.192.76netflix.org has address 52.18.140.121netflix.org has address 52.16.244.17netflix.org has address 52.17.14.207brupala@saturn ~ $ host netflix.benetflix.be has address 52.32.78.165netflix.be has address 52.32.240.186netflix.be has address 52.32.140.41netflix.be has address 50.17.247.31netflix.be has address 54.89.245.208netflix.be has address 184.73.192.76netflix.be has address 52.18.140.121netflix.be has address 52.16.244.17netflix.be has address 52.17.14.207brupala@saturn ~ $ host netflix.chnetflix.ch has address 52.32.78.165netflix.ch has address 52.32.240.186netflix.ch has address 52.32.140.41netflix.ch has address 50.17.247.31netflix.ch has address 54.89.245.208netflix.ch has address 184.73.192.76netflix.ch has address 52.18.140.121netflix.ch has address 52.16.244.17netflix.ch has address 52.17.14.207brupala@saturn ~ $ host netflix.spHost netflix.sp not found: 3(NXDOMAIN)brupala@saturn ~ $ host netflix.esnetflix.es has address 54.77.108.2netflix.es has address 52.17.227.174netflix.es has address 52.19.40.147netflix.es has address 52.208.135.54netflix.es has address 52.49.219.75netflix.es has address 54.171.116.69netflix.es has address 54.171.27.14netflix.es has address 34.253.104.7netflix.es has IPv6 address 2a01:578:3::3413:3885netflix.es has IPv6 address 2a01:578:3::341e:80ednetflix.es has IPv6 address 2a01:578:3::22f9:7da7netflix.es has IPv6 address 2a01:578:3::341e:2dc6netflix.es has IPv6 address 2a01:578:3::341f:91b7netflix.es has IPv6 address 2a01:578:3::34d1:4fbanetflix.es has IPv6 address 2a01:578:3::364c:a192netflix.es has IPv6 address 2a01:578:3::364d:8713brupala@saturn ~ $ host netflix.orgnetflix.org has address 52.32.78.165netflix.org has address 52.32.240.186netflix.org has address 52.32.140.41netflix.org has address 50.17.247.31netflix.org has address 54.89.245.208netflix.org has address 184.73.192.76netflix.org has address 52.18.140.121netflix.org has address 52.16.244.17netflix.org has address 52.17.14.207 
etc ... etc...
c'est ahurissant de voir qu'on en est réduit là en entreprise :-(

larmiche · Answer

Désolé pour ma réponse tardive.

Oui effectivement il y a beaucoup de chose a bloquer ! =)

Voici ma liste actuel :

ipv4-c094-cdg001-ix.1.oca.nflxvideo.net
www1.netflix.com
www.netflix.com
www.us-west-2.prodaa.netflix.com
www2.netflix.com
www3.netflix.com
art-s.nflximg.net
nflxvideo.net
ipv4-c103-cdg001-ix.1.oca.nflxvideo.net
ipv4-c048-cdg001-ix.1.oca.nflxvideo.net
ipv4-c029-cdg001-ix.1.oca.nflxvideo.net
occ-0-55-56.1.nflxso.net
netflix.com
netflix.net
tv.netflix.com

Le site n'est toujours pas entièrement bloqué, seul un affichage HTML (Sans CSS) résiste encore et toujours a mon blocage. mais au moins les flux vidéo sont coupés.
J'ai pu encore voir des serveurs amazon (AWS) dans le lot que j'ai pas encore eu le temps d'ajouter a ma règle.

Voilà, si tous ça peut en aider certain !

Blocage parefeu Netflix

3 réponses

Discussions similaires

Newsletters