|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Just for information: http://pastebin.com/dBYV9Zzb Here is completely actual Cisco NBAR filtering capabilities from one of my front 2901 with IOS 15.5 + actual NBAR2 protocol pack. Just take a look. You can see there P2P, Torrents, FB, YT, etc.etc.etc. Not as Squid's antagonist - but just as attitional tools to filter. Note: Cisco also has time-based ACL's. 05.05.16 3:28, Yuri Voinov пишет: > > Finally, > > read this thread too: > > http://www.spinics.net/lists/squid/msg81113.html > > Some questions already answered here. > > 05.05.16 3:26, Yuri Voinov пишет: > > > > As a part of solution I recommend (by my own experience) > consider to use this: > > > > > https://www.urlfilterdb.com/products/ufdbguard.html > > > > > But I repeat: this is NOT magic button "Disable all". This is > relatively effective tool to block categories. > > > > > This is only URL/HTTP based tool, which required some more > forces to use it with HTTPS. > > > And this can't be other means to replace when it comes to > other protocols. > > > > > Squid is only HTTP/HTTPS proxy. Not at all existing > protocols. > > > > > 05.05.16 3:18, Yuri Voinov пишет: > > > > > > > > Generally, for effective blocking of everything > better design > > > would first consider - as everyone and everything is > engeneered, > > > > > > and then look for the magic button "to disable all > to hell." > > > > > > > > > > Then it becomes clear what is possible and what > means - and > > > what is not. > > > > > > > > > > Especially P2P - this is at all not about Squid. > > > > > > > > > > 05.05.16 3:11, Yuri Voinov пишет: > > > > > > > > > > > > > > > Facebook uses Akamai as background CDN, > so you > > > need to block > > > > > > Akamai (related URL's, which can be > difficult, so > > > consider to use > > > > > > Cisco NBAR DPI functionality). too in case > to > > > completely block FB. > > > > > > > > > > > > > > > > > > > YT still uses QUIC/SPDY, so read this > > > > > > > > > > > > > > > > > > > > > > > http://wiki.squid-cache.org/KnowledgeBase/Block%20QUIC%20protocol > > > > > > > > > > > > > > > > > > > About P2P/Torrents said enough here > > > > > > > > > > > > > > > > > > > > > > http://wiki.squid-cache.org/ConfigExamples/TorrentFiltering > > > > > > > > > > > > > > > > > > > Note: Using Cisco NBAR required valid > service > > > contract. > > > > > > Protocol packs is not lying at all angles, > and are > > > updated > > > > > > monthly. > > > > > > > > > > > > > > > > > > > > > > > > > > > 05.05.16 3:04, Maile Halatuituia пишет: > > > > > > > > > > > > > > > > > > > > > > > > > > > > Someone with ideas on how > to block > > > > > > Facebook,Youtube, P2P > > > > > > > > > > > Traffic though my squid box. > Facebook seems > > > to be > > > > > > working but > > > > > > > > > > > likely some users bypass to > youtube.com and > > > the rest > > > > > > are blocked. > > > > > > > > > > > Also am looking to block P2P > traffic , BITS > > > proticols, > > > > > > etc etc > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Cheers > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Confidentiality Notice: This > > > (including any > > > > > > attachment) > > > > > > > > > > > is intended for internal use > only. Any > > > unauthorized > > > > > > use, > > > > > > > > > > > dissemination or copying of the > content is > > > prohibited. > > > > > > If you are > > > > > > > > > > > not the intended recipient and > have received > > > this > > > > > > e-mail in error, > > > > > > > > > > > please notify the sender by email > and delete > > > this email > > > > > > and any > > > > > > > > > > > attachment. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > > > > > > > > > > > squid-users mailing list > > > > > > > > > > > > > > > > > > > > > squid-users@xxxxxxxxxxxxxxxxxxxxx > > > > > > > > > > > > > > > > > > > > > > > http://lists.squid-cache.org/listinfo/squid-users > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXKmzYAAoJENNXIZxhPexGPB4H/1YUfoeFVgVChaD1qj/8EEhE apmfM15P+5Aia3qJQLWCMTTgnA206sj8KglnxBWPS/LsC+kMEFW/d62W2BAH9POv xDfsZ/qn4N2YbiKbqa+2ul3lY2OGCEb3nZY/ZiRy9JBfK+vrh3ZArcapEuWwMrKw mDqC/EAtbaWvJz+m/zy1mPCfOHEe59N1CV/PZuqOp20a4KsISLxvWXEyTZ2vXt9a P2DDhl1+VeTE48NSv8p8WB6Aam7tdp3wxpN8mMubMhOYs6Bf+KOHEZmKm25ZrpgE 4WVXbO3OBb3Zs73tF1LKmu3p/Hm46AUn733NDPFI9+CUp3QxN0QYdh1C23H8GYA= =aCxH -----END PGP SIGNATURE----- |
Attachment:
0x613DEC46.asc
Description: application/pgp-keys
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
