Web filtering for iOS

[St0rMl0rD]

Hi everyone,

I am trying to block specific websites to a number of iOS devices in Casper via the Configuration Profiles. Looks like I have two options:

- only allow specific websites
- block specific websites

However, when I test the second option, it also blocks other content, not just those specific websites. For instance, it blocks telegraph.co.uk. Is there a way to block just specific websites?

Thanks!

[fraserspeirs]

There are two major modes of operation of the web filter in iOS 7:

• Block everything except a specific set of bookmarks.
• Apply general filtering, according to some black-box algorithm.

In the second case, you also have the ability to blacklist sites that would normally be allowed or whitelist sites that would normally be blocked. You're essentially giving hints to the web blocking engine.

There's no ability to blacklist sites outside of having the general web filter in operation. As you've discovered, the built-in filtering engine is far too conservative for normal use.

[St0rMl0rD]

Sorry, I didn't quite understand that. I only want to block specific websites, so for instance:

- allow everything except www.9gag.com
- don't block other "adult" websites

[jarradyuhas · Accepted solution]

I havent yet tried it, but how about putting * in the whitelist and 9gag.com in the blacklist?

[St0rMl0rD]

Yes, that worked! Fantastic, we have a solution!

Thank you very much,
-J

[TLC10]

I tried this...it didn't work. Still blocked almost everything else, even yahoo.

[bauhsc]

I am having issues using the Web Content Filter as part of a Configuration Profile. We have certain sites blacklisted. Other sites are being restricted that are not on the blacklist. I tried using the * in the permitted URL field but I am still unable to access specific sites that are not on the blacklist. I included a list below of our Permitted/Blacklisted URLs

Allowed Websites
Limit Adult Content

Permitted URLs
Specific URLs that will be allowed
*

Blacklisted URLs Additional URLs that will not be allowed
mobile.twitter.com
kik.com
facebook.com
twitter.com
m.facebook.com
instagram.com
snapchat.com
yikyak.com
yikyakapp.com
ask.fm
vine.co
tumblr.com
oovoo.com
omegle.com
pinterest.com
skype.com

[Emmert]

I believe it's because this method combines what you've specified with Apple's in-house filter. That's what's catching the stuff not on your list.

[cdenesha]

I am tackling this for the first time now. According to the iPhone Configuration Profile Reference, "The Web Content Filter payload allows you to whitelist and blacklist specific web URLs. This payload is supported only on supervised devices."

In Casper when we choose 'Built-In: Limit Adult Content' it is setting 'AutoFilterEnabled' to True. This is what allows both the whitelist and the blacklist. From the reference document:

"If true, automatic filtering is enabled. This function evaluates each web page as it is loaded and attempts to identify and block content not suitable for children. The search algorithm is complex and may vary from release to release, but it is basically looking for adult language, i.e. swearing and sexually explicit language."

Thus it seems it may not be simple URL blocking that Apple is doing. Also,

"URLs are matched using string-based prefix matching—that is, a URL matches a whitelist, blacklist, or permitted list pattern if the exact characters of the pattern appear at the beginning of the URL. No attempt is made to match aliases (IP address versus DNS names, for example) or to handle requests with explicit port numbers. URLs should begin with http:// or https://. If necessary, separate entries must be made for http:// and https:// versions of the same URL."

Personally I seem to not need the http:// prefix. However wildcards are not supported, so I am having to blacklist, for example, both facebook.com and m.facebook.com.

@bauhsc I would expect you to be able to access much of the internet still. Can you clarify if any non-blacklisted web sites are working without the asterisk in the Permitted? If so, then everything should be configured as Apple intended, and you'll need to whitelist as you find blocked sites..

I'm finding domains that work with sub-domains that do not. <sigh>

HTH,

chris