[squid-users] acl for matching URLs (non-regex)

[Felix Leimbach]

Hi,

I want to include the URLhaus blacklist [1] to protect my users from malware, since squidblacklists.org doesn't seem to be actively maintained anymore (RIP Ben Nichols).

However there does not seem to exist an acl type that can match plain URLs in this form:

http://tvmarket.co.kr/Order/Document.zip?natcanotti.biz[document_pdf_____+.exe%5D%2F%3F

Note the URL is not regex-friendly so url_regex is not an option.

How do people block exact URLs?
Is a c-icap module needed for this?

Thanks

Felix

[1] https://urlhaus.abuse.ch/api/#retrieve