Paul Cocker wrote:
Alas, it was all so perfectly planned. Grab some blacklists from Shalla
- http://www.shallalist.de/ - and hook the domain lists into squid using
dstdomain. Unfortunately, it seems squid's interpretation of domain
names is incredibly literal, so rather than youtube.com blocking
*.youtube.com, we in fact find that while youtube.com is blocked,
www.youtube.com is just hunky dory because nsquid literally is blocking
nothing but youtube.com.
Since I'm running squidNT I am in a position where getting squidguard to
run is a bit of a pain since I'll nened to get cygwin up and running and
then it all feels like a bit of a hack. Is squidguard my only route
here, or is there a way to tell squid to be rather more "expansive" in
its domain name interpretation? Ideally this is something I need to get
in place quickly.
Paul
IT Systems Admin
You could probably pre-process the domain blacklist file by doing some
variant of the following pseudocode
while ( x = read from blacklist file)
do
print $x
print *.$x
done
and send the output of that into your new domain blacklist.
Cheers,
/Jason
