[squid-users] Correct order of acl rules?

Amos Jeffries squid3 at treenet.co.nz
Fri Feb 6 19:38:15 UTC 2015


On 7/02/2015 8:27 a.m., Amos Jeffries wrote:
> On 7/02/2015 8:19 a.m., Walter H. wrote:
>> the file blockurls-regex-acl.squid
>> contains e.g.
>> ^http:\/\/s[0-9]\.domain\.tld\/
>>
>> the file allowurls-regex-acl.squid
>> contains e.g.
>> ^http:\/\/s[1-2]+\.domain\.tld\/[a-z0-9\_\-\.]+\.gif
>>
>> the purpose should be, that only gif images of root directory of only
>> the subdomains beginning with s1 or s2 of domain.tld should be allowed

Also, NO that is not what your rules do. Take another look at all the
sub-domains s[1-2]+ will match against...

s1, s2,
s11, s12, s21, s22,
s111, s112, s121, s122, s211, s212, s221, s222,
s1111 ...
...


>>
>> the following url is blocked
>>
>> http://s2443.domain.tld/ghfhfhf.gif
>>
>> why?
> 
> "4" != "\."
> 

Amos



More information about the squid-users mailing list