[squid-users] deny extensions not working for some https

Amos Jeffries squid3 at treenet.co.nz
Mon May 11 00:04:35 UTC 2020


On 11/05/20 11:00 am, robert k Wild wrote:
> so i have made this
> 
> #deny extension types
> acl exttype urlpath_regex -i "/usr/local/squid/etc/extdeny.txt"
> http_access deny exttype
> 
> /usr/local/squid/etc/extdeny.txt
> 
> \.exe(\?.*)?$
> \.msi(\?.*)?$
> \.msu(\?.*)?$
> \.zip(\?.*)?$
> \.iso(\?.*)?$
> 
> the majority of websites it works, like 7zip, anydesk, teamviewer etc etc
> 
> but when i go on this link below it downloads it and i dont know why
> 
> https://www.microsoft.com/en-us/download/confirmation.aspx?id=5842
> 


Because that URL does not contain any of the forbidden "file type" strings.


Amos


More information about the squid-users mailing list