Search squid archive

Re: ACL to block installation program

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Be warned...  a web server can be configured to send an arbitrary mime type for any file.  You may find .jar files with a mime type of html/text.  Also zipping a jar circumvents this check.  Some ICAP servers have a "true content type" check that does not rely on the headers which can be forged, but actually looks at the file that was requested.

On Apr 10, 2015 5:00 AM, "Yuri Voinov" <yvoinov@xxxxxxxxx> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

http://wiki.squid-cache.org/ConfigExamples/BlockingMimeTypes


10.04.15 14:48, Fiorenza Meini пишет:
> Hi,
> is there a way to filter and block update programs which come from
Internet, for example java update or windows update , withouth using the
url of the web site, but working with  header/mime types ?
>
> Thanks and regards
>
> Fiorenza Meini

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJVJ5EoAAoJENNXIZxhPexGJR4H/2z4EeMqAzLUda+uvtYwseCY
xxUwFOMw6Pj5/5RYaqoLjio07RxbOsSS3Tw4NsKlbtGoBD5NZ1haKKak6dn4iGg2
fd0KlkqxG7XgKAtFJhS8+Gk3lMPRENOX6gM09GmY0Ua4Q6nvtH75xvBXqNhG/wut
eS8AXINbwTDi6ciWbtUXLgyeAhQwE9C++8zvTq3UPHv359H8s7HyA6CT6QFvhJtS
pHEqlzbt8daU+wyiiHA9k/DUfjynjHJJgYGUtOiTHrScWFymtqnqo9sKvfR4UbFb
HNi3gfRPtV2pw0igof69m8AGKrihEQqt6YUxgDtHjsogvaFZFc8MIyui64zC6Sg=
=uMVo
-----END PGP SIGNATURE-----

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux