[squid-users] Block VPN access like hola.org ,ultrasurf
Yuri Voinov
yvoinov at gmail.com
Fri Apr 29 10:52:25 UTC 2016
Not with squid, man.
Only on Cisco/another router by IP.
ip access-list extended TO_INET
remark Hamachi
deny ip 25.0.0.0 0.255.255.255 any
deny ip 64.34.106.0 0.0.0.255 any
deny ip any host 69.25.21.195
deny ip any host 74.201.75.195
deny ip any host 146.255.195.92
remark ZenMate servers
deny ip any 162.159.244.0 0.0.0.255
deny ip any 78.137.96.0 0.0.7.255
deny ip any 46.165.192.0 0.0.63.255
deny ip any 207.244.64.0 0.0.63.255
deny ip any 178.162.128.0 0.0.127.255
deny ip any 179.43.128.0 0.0.31.255
deny ip any 88.150.192.0 0.0.31.255
deny ip any 31.7.56.0 0.0.7.255
deny ip any 185.12.44.0 0.0.3.255
deny ip any 103.10.197.0 0.0.0.255
deny ip any 37.58.48.0 0.0.15.255
deny ip any 5.152.192.0 0.0.31.255
deny ip any 81.17.16.0 0.0.15.255
deny ip any 199.115.112.0 0.0.7.255
deny ip any 103.10.199.0 0.0.0.255
remark Opera Turbo servers
deny ip any 37.228.104.0 0.0.7.255
deny ip any 141.0.8.0 0.0.7.255
deny ip any 82.145.208.0 0.0.15.255
deny ip any 195.189.142.0 0.0.1.255
deny ip any 185.26.180.0 0.0.3.255
remark Ultrasurf port
deny tcp any any eq 9666
remark Hola
deny ip any host 107.22.193.119
deny ip any host 54.225.121.9
deny ip any host 54.225.227.202
deny ip any host 54.243.128.120
deny tcp any any eq 6851
deny tcp any any eq 6861
deny ip any 107.155.75.0 0.0.0.255
deny ip any 103.18.42.0 0.0.0.255
deny ip any 103.27.232.0 0.0.0.255
deny ip any 103.4.16.0 0.0.0.255
deny ip any 103.6.87.0 0.0.0.255
deny ip any 104.131.128.0 0.0.15.255
deny ip any 106.185.0.0 0.0.127.255
deny ip any 106.186.64.0 0.0.63.255
deny ip any 106.187.0.0 0.0.63.255
deny ip any 107.155.85.0 0.0.0.255
deny ip any 107.161.144.0 0.0.7.255
deny ip any 107.170.0.0 0.0.127.255
deny ip any 107.181.166.0 0.0.0.255
deny ip any 107.190.128.0 0.0.15.255
deny ip any 107.191.100.0 0.0.3.255
deny ip any 108.61.208.0 0.0.1.255
deny ip any 109.74.192.0 0.0.15.255
deny ip any 128.199.128.0 0.0.63.255
deny ip any 14.136.236.0 0.0.0.255
deny ip any 149.154.157.0 0.0.0.255
deny ip any 149.62.168.0 0.0.3.255
deny ip any 151.236.18.0 0.0.0.255
deny ip any 158.255.208.0 0.0.0.255
deny ip any 162.213.197.0 0.0.0.255
deny ip any 162.217.132.0 0.0.3.255
deny ip any 162.218.92.0 0.0.1.255
deny ip any 162.221.180.0 0.0.1.255
deny ip any 162.243.0.0 0.0.127.255
deny ip any 167.88.112.0 0.0.3.255
deny ip any 168.235.64.0 0.0.3.255
deny ip any 173.255.192.0 0.0.15.255
deny ip any 176.58.96.0 0.0.31.255
deny ip any 176.9.0.0 0.0.255.255
deny ip any 177.67.81.0 0.0.0.255
deny ip any 178.209.32.0 0.0.31.255
deny ip any 178.79.128.0 0.0.63.255
deny ip any 192.110.160.0 0.0.0.255
deny ip any 192.121.112.0 0.0.0.255
deny ip any 192.184.80.0 0.0.7.255
deny ip any 192.211.49.0 0.0.0.255
deny ip any 192.241.160.0 0.0.31.255
deny ip any 192.30.32.0 0.0.3.255
deny ip any 192.34.56.0 0.0.7.255
deny ip any 192.40.56.0 0.0.0.255
deny ip any 192.73.232.0 0.0.7.255
deny ip any 192.81.208.0 0.0.7.255
deny ip any 192.99.0.0 0.0.255.255
deny ip any 198.147.20.0 0.0.0.255
deny ip any 198.211.96.0 0.0.15.255
deny ip any 198.58.96.0 0.0.31.255
deny ip any 199.241.28.0 0.0.3.255
deny ip any 208.68.36.0 0.0.3.255
deny ip any 209.222.30.0 0.0.0.255
deny ip any 213.229.64.0 0.0.63.255
deny ip any 217.170.192.0 0.0.15.255
deny ip any 217.78.0.0 0.0.15.255
deny ip any 23.227.160.0 0.0.0.255
deny ip any 23.249.168.0 0.0.1.255
deny ip any 23.29.124.0 0.0.0.255
deny ip any 31.193.128.0 0.0.15.255
deny ip any 31.220.24.0 0.0.3.255
deny ip any 37.139.0.0 0.0.31.255
deny ip any 37.235.52.0 0.0.0.255
deny ip any 41.215.240.0 0.0.0.255
deny ip any 41.223.52.0 0.0.0.255
deny ip any 46.17.56.0 0.0.7.255
deny ip any 46.19.136.0 0.0.7.255
deny ip any 46.246.0.0 0.0.127.255
deny ip any 46.38.48.0 0.0.7.255
deny ip any 46.4.0.0 0.0.255.255
deny ip any 5.9.0.0 0.0.255.255
deny ip any 50.116.32.0 0.0.15.255
deny ip any 66.85.128.0 0.0.63.255
deny ip any 74.82.192.0 0.0.31.255
deny ip any 77.237.248.0 0.0.1.255
deny ip any 81.4.108.0 0.0.3.255
deny ip any 85.234.128.0 0.0.31.255
deny ip any 88.150.156.0 0.0.3.255
deny ip any 91.186.0.0 0.0.31.255
deny ip any 92.222.0.0 0.0.255.255
deny ip any 92.48.64.0 0.0.63.255
deny ip any 94.76.192.0 0.0.63.255
deny ip any 95.215.44.0 0.0.3.255
deny ip any 96.126.96.0 0.0.7.255
remark Browsec
deny ip any 178.62.64.0 0.0.63.255
deny ip any 178.62.0.0 0.0.63.255
deny ip any 46.101.0.0 0.0.63.255
deny ip any 5.101.111.0 0.0.0.255
deny ip any 45.55.96.0 0.0.31.255
deny ip any 45.55.192.0 0.0.63.255
deny ip any 45.55.128.0 0.0.63.255
deny ip any 162.243.188.0 0.0.1.255
deny ip any 162.243.176.0 0.0.7.255
deny ip any 104.236.64.0 0.0.63.255
deny ip any 104.236.192.0 0.0.63.255
deny ip any 104.236.0.0 0.0.63.255
deny ip any 104.131.64.0 0.0.63.255
deny ip any 104.131.176.0 0.0.15.255
deny ip any 104.131.160.0 0.0.15.255
deny ip any 104.131.0.0 0.0.63.255
deny ip any 198.199.96.0 0.0.15.255
deny ip any 198.199.92.0 0.0.3.255
deny ip any 198.199.112.0 0.0.7.255
deny ip any 192.241.224.0 0.0.15.255
deny ip any 192.241.192.0 0.0.31.255
deny ip any 162.243.128.0 0.0.31.255
deny ip any 107.170.192.0 0.0.63.255
deny ip any 104.236.128.0 0.0.63.255
deny ip any 104.131.144.0 0.0.15.255
deny ip any 95.85.0.0 0.0.63.255
deny ip any 80.240.128.0 0.0.15.255
deny ip any 5.101.96.0 0.0.7.255
deny ip any 5.101.104.0 0.0.3.255
deny ip any 188.226.128.0 0.0.127.255
deny ip any 178.62.128.0 0.0.63.255
deny ip any 146.185.184.0 0.0.7.255
deny ip any 5.101.110.0 0.0.0.255
deny ip any 188.166.64.0 0.0.63.255
deny ip any 188.166.0.0 0.0.63.255
deny ip any 178.62.192.0 0.0.63.255
deny ip any 128.199.32.0 0.0.31.255
deny ip any 192.241.240.0 0.0.15.255
deny ip any 162.243.192.0 0.0.63.255
deny ip any 162.243.191.0 0.0.0.255
deny ip any 107.170.160.0 0.0.31.255
deny ip any 107.170.128.0 0.0.31.255
deny ip any 104.131.224.0 0.0.31.255
deny ip any 104.131.192.0 0.0.31.255
deny ip any 128.199.64.0 0.0.63.255
deny ip any 128.199.192.0 0.0.63.255
deny ip any 103.253.144.0 0.0.3.255
remark Stealthy
deny ip any 118.97.128.0 0.0.15.255
deny ip any 41.231.0.0 0.0.255.255
deny ip any 195.154.0.0 0.0.255.255
remark Finally pass internal LAN to NAT
permit ip 192.168.0.0 0.0.255.255 any
Hope this helps.
29.04.16 16:33, Reet Vyas пишет:
> Hi,
>
> I have working trasparent squid , Some users are using proxy vpn in
> moziilla as addon and bypassing my squid, Please tell me how to block
> all hola.org <http://hola.org> vpn and ulrta surf, I have already
> blocked websites,but seems not working.
>
> Please let me know how to block these vpn access.
>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160429/2c527ce7/attachment-0001.html>
More information about the squid-users
mailing list