At work, they blocked personal email. Our IT staff couldn't find a good way to block only Gmail so they blocked ALL Google accounts. I asked my supervisor if all Google sign-ins should be blocked and he confirmed Gmail only, they just didn't do it correctly. I use Google Calendar for work and being unable to sign into it is really hurting me. I've sent a request to our IT dept but they are currently dealing with server upgrades and whatnot. Basically, I'm low on the priority list.

So my question is: Is there any way to sign into Google Chrome browser or individual Google sites without going through "accounts.google.com"? I don't care about Gmail, I'm not trying to go around what they want blocked, I just need to be able to log into Google Accounts so I can let Outlook sync with Google Calendar.

  • 1
    Ask them for an alternative calendar that you CAN use? – techie007 Jul 8 '13 at 19:23
  • 1
    set up a personal wifi hotspot on your cell phone and access google.com through there? :) – MattDMo Jul 8 '13 at 21:38
  • They don't allow it. I'm not trying to get around security. I respect their decision to block person email. It's the other things that got blocked in that pursuit that I'm trying to get back. – WizardKnight Jul 8 '13 at 22:20
  • 1
    This question appears to be off-topic because it is about web applications, but is not clear enough to warrant migration to Web Applications – Darth Android Jul 12 '13 at 1:28

HTTP request headers have a domain field that states the domain the request is for, it's mainly useful for addresses that have multiple domains/sites. It's a required field in HTTP 1.1, so they could somewhat-reliably block according to that.

However, the problem is with SSL/TLS, it would encrypt everything so that the field couldn't be accessed. That could be subverted by blocking encryption for google entirely, although that's a bit extreme. Other methods might be to have everyone use a proxy that blocks requests to gmail, but a good method would be to block DNS requests/replies for mail.google.com, which skips encryption entirely, but it still has some caveats. (e.g. people could add the IP addresses for mail.google.com to their hosts file so that their browser resolves the domain properly while still sending the domain field so they access gmail)

All in all, I'd recommend you suggest blocking DNS instead of them blocking the IP addresses themselves, they may miss one or two, but it's the majority they'll probably care about.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy