<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><div><div>1448445753.714 6 10.22.100.3 TCP_MISS/200 799 GET http://officecdn.microsoft.com/pr/39168D7E-077B-48E7-872C-B232C3E72675/Office/Data/v32.cab - HIER_DIRECT/127.0.0.1 text/html</div></div><div>But i do have the denied access page, I can't download the .cab from the browser</div><div><br></div><div><div>1448445766.529 5 10.22.100.3 TCP_MISS/200 834 GET http://au.v4.download.windowsupdate.com/d/msdownload/update/software/updt/2013/12/windows8.1-kb2909569-x64_da69540676fbda6cd24305056220322b8ef91729.cab - HIER_DIRECT/127.0.0.1 text/html</div></div><div>But i do have the denied access page, I can't download the .cab from the browser</div><div><br></div><div><div><div>1448445807.418 50 10.22.100.3 TCP_MISS/200 7450 GET http://v4.download.windowsupdate.com/d/msdownload/update/others/2015/11/19457798_2c503230affa03a9d1065dbf33a681b0fd9a0176.cab - HIER_DIRECT/37.58.147.9 application/octet-stream</div></div><div><br></div><div>No denied access page, I can download the .cab from the browser</div><div><br></div><br><div>> To: squid-users@lists.squid-cache.org<br>> From: eliezer@ngtech.co.il<br>> Date: Wed, 25 Nov 2015 10:25:23 +0200<br>> Subject: Re: [squid-users] squidguard and windows update<br>> <br>> What do you see in the access.log? There should be some "TCP_X/Y" value, <br>> What is the value?<br>> <br>> Eliezer<br>> <br>> On 25/11/2015 10:07, Magic Link wrote:<br>> > Hi,<br>> > i block domains related to Windows Update with squidguard that I see in the sarg reports. Most of these domains are blocked like I want, but some of them are still in sarg-reports so users can download updates and I don't want this.<br>> > Here are the urls still in sarg-reports :<br>> > http://au.v4.download.windowsupdate.com/d/msdownload/update/software/secu/2015/10/windows8.1-kb3097997-x64_28a367b2325b96943065ae5e83b5979da8f1bb8d.cabhttp://au.ds.download.windowsupdate.com/c/msdownload/update/software/crup/2015/11/outlook-x-none_7e582fc36876ff7a05f286125b7823c0ddcd4e71.cabhttp://v4.download.windowsupdate.com/c/msdownload/update/others/2015/11/19460743_8a29f07cae571a85d60b3791a1525c681b85fe4a.cabhttp://au.v4.download.windowsupdate.com/c/msdownload/update/software/secu/2014/04/windows8.1-kb2962123-x64-express_c45186ad36998f29faa19cec54a46d3c7d25cd50.cab<br>> > Strange thing is when I click on these urls, the squidguard deny page do appear ! But they are listed in sarg-reports in the "downloads" page.<br>> > Here are the domains I block :<br>> > download.windowsupdate.comau.download.windowsupdate.comupdate.microsoft.comupdate.microsoft.com.nsatc.netwindowsupdate.comwindowsupdate.microsoft.comds.download.windowsupdate.comdl.ws.microsoft.comau.v4.download.windowsupdate.comfg.v4.download.windowsupdate.combg1.v4.emdl.ws.microsoft.comofficecdn.microsoft.commarketplacecontent.windowsphone.comcdn.marketplacecontent.windowsphone.comfg.v4.b1.download.windowsupdate.comb1.download.windowsupdate.comv4.b1.download.windowsupdate.comaupl.v4.download.windowsupdate.comaq.v4.emdl.ws.microsoft.combg.ds.emdl.ws.microsoft.combg.v4.emdl.ws.microsoft.combg1.ds.emdl.ws.microsoft.combg1.v4.emdl.ws.microsoft.combg2.ds.emdl.ws.microsoft.combg2.v4.emdl.ws.microsoft.combg3.ds.emdl.ws.microsoft.combg3.v4.emdl.ws.microsoft.combg4.ds.emdl.ws.microsoft.combg4.v4.emdl.ws.microsoft.combg5.ds.emdl.ws.microsoft.combg5.v4.emdl.ws.microsoft.combg6.ds.emdl.ws.microsoft.combg6.v4.emdl.ws.microsoft.combg7.v4.emdl.ws.microsoft.comds.emdl.ws.microsoft.comfg.v4.emdl<br>> .ws.microsoft.comv4.emdl.ws.microsoft.comds.emdl.ws.microsoft.comemdl.ws.microsoft.comws.microsoft.comcare.dlservice.microsoft.comfg.ds.b1.download.windowsupdate.comds.b1.download.windowsupdate.comb1.download.windowsupdate.com<br>> > Do I miss some domains ? Do I have to put ip instead or add to this list ?<br>> > Thank you !<br>> > <br>> <br>> _______________________________________________<br>> squid-users mailing list<br>> squid-users@lists.squid-cache.org<br>> http://lists.squid-cache.org/listinfo/squid-users<br></div></div> </div></body>
</html>