<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
Agreed.<br>
<br>
10.04.15 23:57, brendan kearney пишет:<br>
<span style="white-space: pre;">> I am in a policy enforcement
role, and our policy making / auditing team<br>
> approached me about why they could download a jar file from a
site that was<br>
> not explicitly allowed to provide java content (I.e. not on
the<br>
> whitelist). It was because the mime type not being accurate.<br>
> On Apr 10, 2015 1:40 PM, "Yuri Voinov"
<a class="moz-txt-link-rfc2396E" href="mailto:yvoinov@gmail.com"><yvoinov@gmail.com></a> wrote:<br>
><br>
>><br>
> I would never have such an idea had not occurred. The man
asked - I<br>
> answered. I know what you're talking about, and I would use
ACL to URL for<br>
> this.<br>
><br>
> 10.04.15 23:32, brendan kearney пишет:<br>
> >>> Be warned... a web server can be configured to
send an arbitrary mime<br>
> type<br>
> >>> for any file. You may find .jar files with a
mime type of html/text.<br>
> Also<br>
> >>> zipping a jar circumvents this check. Some ICAP
servers have a "true<br>
> >>> content type" check that does not rely on the
headers which can be<br>
> forged,<br>
> >>> but actually looks at the file that was
requested.<br>
> >>> On Apr 10, 2015 5:00 AM, "Yuri Voinov"
<a class="moz-txt-link-rfc2396E" href="mailto:yvoinov@gmail.com"><yvoinov@gmail.com></a><br>
> <a class="moz-txt-link-rfc2396E" href="mailto:yvoinov@gmail.com"><yvoinov@gmail.com></a> wrote:<br>
> >>><br>
> >>>><br>
> >>>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/BlockingMimeTypes">http://wiki.squid-cache.org/ConfigExamples/BlockingMimeTypes</a><br>
> >>><br>
> >>><br>
> >>> 10.04.15 14:48, Fiorenza Meini пишет:<br>
> >>>>>> Hi,<br>
> >>>>>> is there a way to filter and block
update programs which come from<br>
> >>> Internet, for example java update or windows
update , withouth using the<br>
> >>> url of the web site, but working with
header/mime types ?<br>
> >>>>>><br>
> >>>>>> Thanks and regards<br>
> >>>>>><br>
> >>>>>> Fiorenza Meini<br>
> >>><br>
> >>>><br>
> >>>>
_______________________________________________<br>
> >>>> squid-users mailing list<br>
> >>>> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> >>>>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
> >>>><br>
> >>><br>
><br>
>><br>
>><br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJVKBkfAAoJENNXIZxhPexGQD4H/2U2jQtNqkVS1Hk3gxkyWXeq
<br>
nf6ge0Kd+W92WtBWs4Hkf1vbifF9Z/TDckEaAH+SLQaDTr4/O+EeEtQTLLyFNj7Z
<br>
5G/RuuGJ+Y1CFwo8zG3x9qqP1ga3Q9PKKjf64k3zlZrEqgWamMksbSoWIEHaQat9
<br>
aDi+iGOTGeuF6RxRBFjw1G8nxtRGQAPIs2/B0WDDlY/sQuz7na7R5vDSZCD8O+6X
<br>
ywr6Fe3s3CsLrb6F5xxTEzQiofCDerZtszZ9A/OOOTz0XLdPvOqNQAmmhHYk4xQb
<br>
CdRREdz6K0wiecM7NFn+jocnet6ZnYP/Q7C5IB7PfiG2N+S0djueWHrmVqP7IVg=
<br>
=gWJ2
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>