How to allow viewing only of twitter

Products

• ProxySG Software - SGOS

Issue/Introduction

How to allow viewing of twitter

How to block tweets but allow viewing

Resolution

Since twitter is all done over SSL, SSL interception is requiered, but can be limited to only be done on twitter.com.

The following CPL can be used to allow viewing of twitter, it allows following of other and viewing of channels but block tweets.

<Proxy>
    ALLOW condition= Destination-twitter-specific
    ALLOW condition= Destination-twitter http.method=(CONNECT, GET)
    ALLOW http.method=(CONNECT, GET) request.header.Referer= CombinedDestinationtwitter
    DENY url.domain=//twitter.com/

define condition Destination-twitter
    url.domain=//twitter.com/
    url.domain=//twimg0-a.akamaihd.net/
    url.domain=//twimg.com/
end

define condition Destination-twitter-specific
    url.domain="//twitter.com/sessions"
    url.domain="//twitter.com/logout" ;allowing logout
    url.domain="//api.twitter.com/1/friendships" ;allowing follow
    url.domain="//twitter.com/scribe"
    url.host=twitter.com url.path.substring=/login/twitter ;enables captcha for login page
end

The CPL can be added in a CPL layer in the VPM or in the local policy file.