[squid-users] How to completely blacklist a domain + subdomains, including HTTPS?

[roee klinger]

Hey,

I have found a lot of outdated or conflicting information about this
online, and since this is a really important matter, I wanted to make sure
I am doing this correctly.

I am attempting to block some websites completely, including all HTTPS
traffic and subdomains.

Squid.conf:

acl domain_blacklist dstdomain "/etc/squid/domain_blacklist.txt"
http_access deny all domain_blacklist
http_reply_access deny domain_blacklist
http_access deny CONNECT domain_blacklist


/etc/squid/domain_blacklist.txt:

.ph
.somepornwebsite.com
.facebook.com


.ph - will block all websites that have the .ph TLD including subdomains.
.somepornwebsite.com - will block all traffic to somepornwebsite.com,
including all subdomains.
.facebook.com - will block all traffic to FB including subdomains.

Am I doing this the right way?
Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20210309/549dfbfb/attachment.htm>