> I've recently installed a Squid 2.6STABLE16 system in a country that > requires all web browsing to go through a government-specified proxy > server. The Government runs a non-transparent proxy setup that must be > explicitly listed in the Squid configuration. > > That would normally be easy, as all I'd do is list the Governement proxy > as a parent. However, I have three types of traffic I'd like to direct > to different places: > > 1. Traffic that should be virus-scanned before delivering to > the client. > 2. Traffic that should not be virus-scanned such as web > conferencing. > 3. Traffic that is internal and should not be virus scanned or > given to the Government proxy. > > Here's what I have so far: > > cache_peer 127.0.0.1 parent 8080 7 name=vscan no-query no-digest > default > cache_peer govproxy parent 3128 7 no-query no-digest > > cache_peer_domain vscan !.pressaccess.com !.presentonline.com > cache_peer_domain vscan !.interactconferencing.com !.raindance.com > cache_peer_domain vscan !.mshow.com !.placeware.com > cache_peer_domain vscan !.ilearning.com !.kindercam.com > !.fidelity.com > cache_peer_domain vscan !.lexisnexis.com !data.finlistics-vm.com > cache_peer_domain vscan !library.midicorp.com > cache_peer_domain vscan !.finance.yahoo.com !.tenrox.com > !.riskadvisory.com > > acl internal-dst dst 10.0.0.0/255.0.0.0 > acl internal-dst dst 172.16.0.0/255.240.0.0 > acl internal-dst dst 192.168.0.0/255.255.0.0 > always_direct allow internal-dst > > I'd like to bypass the virus scanner for more things than just domain > lists. I'd like to be able to use an ACL like: > acl novirus-url urlpath_regex -i \.gif(\?.*)?$ \.jpg(\?.*)?$ > \.png(\?.*)?$ > acl novirus-url urlpath_regex -i \.mpe?g(\?.*)?$ \.avi(\?.*)?$ > \.swf(\?.*)?$ > acl novirus-url urlpath_regex -i \.qt(\?.*)?$ \.mov(\?.*)?$ > \.as[fx](\?.*)?$ > acl novirus-url urlpath_regex -i \.rm(\?.*)?$ \.wm[av](\?.*)?$ > \.mp3(\?.*)?$ > acl novirus-url urlpath_regex -i \.m4[avp](\?.*)?$ \.mp4v?(\?.*)?$ > acl novirus-url urlpath_regex -i \.wav(\?.*)?$ > And then use that ACL to bypass the virus scanner and go directly to the > Government proxy. I didn't see anything in Squid 2.6STABLE16 that would > do what I need. Am I missing something? Yes. cache_peer_access Amos
