Be warned... a web server can be configured to send an arbitrary mime type for any file. You may find .jar files with a mime type of html/text. Also zipping a jar circumvents this check. Some ICAP servers have a "true content type" check that does not rely on the headers which can be forged, but actually looks at the file that was requested.
On Apr 10, 2015 5:00 AM, "Yuri Voinov" <yvoinov@xxxxxxxxx> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
http://wiki.squid-cache.org/ConfigExamples/BlockingMimeTypes
10.04.15 14:48, Fiorenza Meini пишет:
> Hi,
> is there a way to filter and block update programs which come from
Internet, for example java update or windows update , withouth using the
url of the web site, but working with header/mime types ?
>
> Thanks and regards
>
> Fiorenza Meini
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAEBCAAGBQJVJ5EoAAoJENNXIZxhPexGJR4H/2z4EeMqAzLUda+uvtYwseCY
xxUwFOMw6Pj5/5RYaqoLjio07RxbOsSS3Tw4NsKlbtGoBD5NZ1haKKak6dn4iGg2
fd0KlkqxG7XgKAtFJhS8+Gk3lMPRENOX6gM09GmY0Ua4Q6nvtH75xvBXqNhG/wut
eS8AXINbwTDi6ciWbtUXLgyeAhQwE9C++8zvTq3UPHv359H8s7HyA6CT6QFvhJtS
pHEqlzbt8daU+wyiiHA9k/DUfjynjHJJgYGUtOiTHrScWFymtqnqo9sKvfR4UbFb
HNi3gfRPtV2pw0igof69m8AGKrihEQqt6YUxgDtHjsogvaFZFc8MIyui64zC6Sg=
=uMVo
-----END PGP SIGNATURE-----
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users