Tuhin Black wrote:
I have configure my squid to block some file by extension to prevent downloading. example, acl BlockExt url_regex -i \.mp3$ \.asx$ \.wma$ \.wmv$ \.avi$ \.mpeg$ http_access deny BlockExt all And its working fine. most of mp3,mpg download is blocked but recently i have discovered user can download mp3 from some specific web site. like www.mp3.com. (http://www.mp3.com/free-music/11-A/all-free-music) I have check and found this sites user different kind of link to download like, http://dw.com.com/redir?siteid=31&edid=3&ptid=&ontid=11735&ctype=RF;Song;ATN;PTNR&cval=3;21460710;2;&desturl=http%3A%2F%2Fdownload.mp3.com%2Findex.php%3Fsect%3Dforce_download%26type%3D3%26track_id%3D21460710%26time%3D1214201264%26auth%3Db286519c195e3dc51e7c0fee7fdda182 if i check my squid access log, i have only found this log, http://dw.com.com/redir? http://download.mp3.com/index.php? i am afraid maybe there is more site user can download mp3 or mpg files without any restriction.
Many, many, many others. Most blogs or forums for example.
Did i mis configure my squid? Pls help.
As you have just found, blocking on file type is better than blocking on file ending.
Create a "rep_mime_type" ACL and use it in http_reply_access lines to block downloads.
Amos -- Please use Squid 2.7.STABLE3 or 3.0.STABLE7