[squid-users] urlpath_regex not being matched

Jorgeley Junior jorgeley at gmail.com
Mon Jan 18 18:43:56 UTC 2016


I didn't test this, but i think it works better:
*http_access deny banned_sites   !good_facebook*
is it works?

2016-01-18 16:35 GMT-02:00 Lucía Guevgeozian <lulumailgo at gmail.com>:

> Ok, thanks again for the quick reply, I'm upgrading :)
>
> Regards,
> Lucia
>
> 2016-01-18 14:58 GMT-03:00 Yuri Voinov <yvoinov at gmail.com>:
>
>>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA256
>>
>>
>>
>> 18.01.16 23:56, Lucía Guevgeozian пишет:
>> > Thank you very much for your responses.
>> >
>> > I understand from http://www.squid-cache.org/Doc/config/http_access/
>> that
>> > http_access will not work with https in version of squid older than 3.3.
>> >
>> > Do you know if an alternative config exists without upgrading?
>> We don't know it. HTTPS-ops required updrade.
>>
>> >
>> >
>> > Regards,
>> > Lucia
>> >
>> > 2016-01-18 14:38 GMT-03:00 Antony Stone
>> <Antony.Stone at squid.open.source.it> <Antony.Stone at squid.open.source.it>:
>> >
>> >> On Monday 18 January 2016 at 18:31:40, Yuri Voinov wrote:
>> >>
>> >>> Facebook (like more others) uses Akamai CDN as background delivery
>> >> service.
>> >>>
>> >>> So, facebook.* domain is a little part of whole big fat Facebook :)
>> >>
>> >> True, but that should still match *request* URLs (once the HTTP/S
>> problem
>> >> is
>> >> sorted out), no?
>> >>
>> >>> 18.01.16 23:29, Antony Stone пишет:
>> >>>> On Monday 18 January 2016 at 18:22:24, Lucía Guevgeozian wrote:
>> >>>>> acl good_facebook urlpath_regex groups
>> >>>>> acl banned_sites url_regex "/etc/squid/config/banned_sites"
>> >>>>>
>> >>>>> inside banned_sites I have the word facebook
>> >>>>>
>> >>>>> http_access allow good_facebook
>> >>>>> http_access deny banned_sites
>> >>>>
>> >>>> Okay, so you've set up some HTTP access controls... so far, so good.
>> >>>>
>> >>>>> If I try accessing https://www.facebook.com/groups I get blocked
>> >>>>
>> >>>> That's an HTTPS URL, not HTTP :)
>> >>>>
>> >>>>> ps: I'm using this squid version
>> >>>>> Squid Cache: Version 3.0.STABLE18
>> >>>>
>> >>>> That's old - you are strongly recommended to upgrade.
>> >>>>
>> >>>>
>> >>>> Antony.
>> >>
>> >> --
>> >> Perfection in design is achieved not when there is nothing left to
>> add, but
>> >> rather when there is nothing left to take away.
>> >>
>> >>  - Antoine de Saint-Exupery
>> >>
>> >>                                                    Please reply to the
>> >> list;
>> >>                                                          please
>> *don't* CC
>> >> me.
>> >> _______________________________________________
>> >> squid-users mailing list
>> >> squid-users at lists.squid-cache.org
>> >> http://lists.squid-cache.org/listinfo/squid-users
>> >>
>> >
>> >
>> >
>> > _______________________________________________
>> > squid-users mailing list
>> > squid-users at lists.squid-cache.org
>> > http://lists.squid-cache.org/listinfo/squid-users
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v2
>>
>> iQEcBAEBCAAGBQJWnSevAAoJENNXIZxhPexGG9EH/0Rmqad38Lf8vHArd7ZrYrIo
>> Ie6viHuydYgsJOa+Ii/gqbsmIeiubPA8gY5mzJFzAo44k+Q0v8iUv8Qm2bQsD7v5
>> DhsEqenkfazw3Gv3PTQM27aUUk6ucDBJhtrCiGGrofLnMzaHoqVlSU0Vwkv2cNfr
>> flXuTfzhJtqNrXbiyVw75v8lvesRxozpfBas3vOBimrBCn6UFqyFlkirQSvo+m3R
>> IRN/FXOVpJqRXSAfZWRPQayfmDxf+cZbX2nhQvwvBatyu8+Z8s4sl7m6Lf/KU4U2
>> mZaRon9h7cJGmC/sVNre1JFI7tTACg2nnGjINtv+Itm7uE9r95CNr+OGxYkLUcM=
>> =EES7
>> -----END PGP SIGNATURE-----
>>
>>
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-users
>>
>>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
>


--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160118/a457220d/attachment.html>


More information about the squid-users mailing list