Search squid archive

Re: ACL blocks http, but not https

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 28/10/10 23:00, Marc Muehlfeld wrote:
Am 27.10.2010 12:10, schrieb Amos Jeffries:
What you need to take away from this is that 1) where possible add whole
domains and sets of sub-domains to "A" the first ACL. and 2) always
make sure
that your second "B" and regex ACL are matched. New rules into the
regex need
to be checked that the domain(s)the match are in the "B" list.

The problem with 'dstdomain' is, that the exact name must match. Because
most sites are available by their domain name and 'www.domainname', I
need at least two entries for every domain. A lot of domains bring other
subdomains that should also be blocked. That was the reason we used
url_regex.

Is there a way to specify something like '*facebook.com'? Otherwise, i'm
not sure if dstdomain is the right option for our needs.

There is. Start the domain match text with a dot:

  acl facebook dstdomain .facebook.com


Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.8
  Beta testers wanted for 3.2.0.2


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux