<html><head></head><body>Well, I know that issue very good and google is the issue since they should put their captcha on a own subdomain. Then we could effectivley allow only the access to the captcha.<br>
<br>
Until that there is no good way to achive this. But there is a non reliable way of blocking <a href="http://google.com">google.com</a><br>
<br>
First allow the Connect method for <a href="http://google.com">google.com</a><br>
Acl CONNECT method CONNECT<br>
acl sslconnect dstdomain -i <a href="http://www.google.com">www.google.com</a><br>
http_access allow CONNECT sslconnect<br>
Then use an url regex and allow <a href="http://google.com/recaptcha">google.com/recaptcha</a><br>
<br>
This way sometimes <a href="http://www.google.com">www.google.com</a> is blocked, sometimes not. But access to recaptcha will always work.<br>
<br>
Why we can't block it reliable? Well when browser/client wants to connect to https website then the firsr thing the browser trie is open a ssl tunnel to the FQDN<br>
As soon as the tunnel is up it will request the ressource. May it helps if you add a url regex deny between allowing the connect method and allowing the url <a href="http://www.google.com/recaptcha">www.google.com/recaptcha</a><br>
<br>
Written on my mobile..<br>
<br>
Br,<br>
Flashdown<br>
<br>
<br><br><div class="gmail_quote">Am 27. Juni 2017 17:07:19 MESZ schrieb "Cherukuri, Naresh" <ncherukuri@partycity.com>:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">Hi Eliezer,<br /><br />We successfully blocked gmail, google images, google drive and rest all google related. Now we allowing <a href="http://www.google.com">www.google.com</a> and www. google/Recaptcha. We still need to block <a href="http://www.google.com">www.google.com</a> and just allow <a href="http://www.google/recaptcha">www.google/recaptcha</a>. Is there a way to do that?<br /><br />Appreciate your quick turnover!<br /><br />Thanks&Regards,<br />Naresh<br /><br /> <br />-----Original Message-----<br />From: Eliezer Croitoru [mailto:eliezer@ngtech.co.il] <br />Sent: Tuesday, June 27, 2017 10:16 AM<br />To: Cherukuri, Naresh; squid-users@lists.squid-cache.org<br />Subject: RE: [squid-users] Squid Version 3.5.20<br /><br />Hey,<br /><br />I can try to help you but I do not have enough logs for it.<br />Also it's not so simple.<br />Basically you will need to block gmail and google drive themselves in one rule that will not include other google services.<br /><br />All The Bests,<br />Eliezer<br /><br />----<br /><a href="http://ngtech.co.il/lmgtfy">http://ngtech.co.il/lmgtfy</a>/<br />Linux System Administrator<br />Mobile: +972-5-28704261<br />Email: eliezer@ngtech.co.il<br /><br /><br />From: squid-users [mailto:squid-users-bounces@lists.squid-cache.org] On Behalf Of Cherukuri, Naresh<br />Sent: Friday, June 23, 2017 23:34<br />To: squid-users@lists.squid-cache.org<br />Subject: [squid-users] Squid Version 3.5.20<br /><br />Hello All,<br /><br />I installed Squid version 3.5.20 on RHEL 7 and generated selfsigned CA certificates, can you shed some light on how to "Configure regular expression of the Google ReCaptcha URL with ACL".<br /><br />My requirement :<br /><br />This requirement is to allow Google's ReCaptcha URL (HTTPS) so associates can successfully use ADP which now utilizes Google's ReCaptcha which is called via an HTTPS URL, without allowing users to access other Google-related services such as Gmail or Google Drive.<br /><br />Any ideas much appreciated!<br /><br />Thanks,<br />Naresh<br /><br /><hr /><br />squid-users mailing list<br />squid-users@lists.squid-cache.org<br /><a href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br /></pre></blockquote></div></body></html>