<html><head></head><body><div class="ydpb2093ffeyahoo-style-wrap" style="font-family: Helvetica Neue, Helvetica, Arial, sans-serif; font-size: 13px;"><div></div>
<div dir="ltr" data-setdir="false">Hi All</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Can any one help on the below issue.<br>I tried changing the order of deny and allow acl but it did not yield any result.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Regards</div><div dir="ltr" data-setdir="false">Arjun K</div><div dir="ltr" data-setdir="false"><br></div><div><br></div>
</div><div id="ydpde3ae42fyahoo_quoted_9137471454" class="ydpde3ae42fyahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Sunday, 3 May, 2020, 05:21:02 pm IST, Arjun K <email_arjun@yahoo.com> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="ydpde3ae42fyiv7288863408"><div><div class="ydpde3ae42fyiv7288863408yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div dir="ltr">Hi All</div><div dir="ltr"><br></div><div dir="ltr">The below is the configuration defined in the proxy server.</div><div dir="ltr">The issue is that the proxy is not blocking the websites mentioned in a file named denylist.txt.<br>Kindly let me know what needs to be changed to block the websites.</div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr"><div><div>####IP Ranges allowed to use proxy</div><div>acl localnet src 10.196.0.0/16<br></div><div>acl localnet src 10.197.0.0/16</div><div>acl localnet src 10.198.0.0/16</div><div>acl localnet src 10.199.0.0/16</div><div>acl localnet src 10.200.0.0/16</div><div><br></div><div>####Allowed and Denied URLs</div><div>acl allowedurl dstdomain /etc/squid/allowed_url.txt</div><div>acl denylist dstdomain /etc/squid/denylist.txt</div><div><br></div><div>acl windowsupdate dstdomain windowsupdate.microsoft.com</div><div>acl windowsupdate dstdomain .update.microsoft.com</div><div>acl windowsupdate dstdomain download.windowsupdate.com</div><div>acl windowsupdate dstdomain redir.metaservices.microsoft.com</div><div>acl windowsupdate dstdomain images.metaservices.microsoft.com</div><div>acl windowsupdate dstdomain c.microsoft.com</div><div>acl windowsupdate dstdomain www.download.windowsupdate.com</div><div>acl windowsupdate dstdomain wustat.windows.com</div><div>acl windowsupdate dstdomain crl.microsoft.com</div><div>acl windowsupdate dstdomain sls.microsoft.com</div><div>acl windowsupdate dstdomain productactivation.one.microsoft.com</div><div>acl windowsupdate dstdomain ntservicepack.microsoft.com</div><div>acl windowsupdate dstdomain eu.vortex-win.data.microsoft.com</div><div>acl windowsupdate dstdomain eu-v20.events.data.microsoft.com</div><div>acl windowsupdate dstdomain usseu1northprod.blob.core.windows.net</div><div>acl windowsupdate dstdomain usseu1westprod.blob.core.windows.net</div><div>acl windowsupdate dstdomain winatp-gw-neu.microsoft.com</div><div>acl windowsupdate dstdomain winatp-gw-weu.microsoft.com</div><div>acl windowsupdate dstdomain wseu1northprod.blob.core.windows.net</div><div>acl windowsupdate dstdomain wseu1westprod.blob.core.windows.net</div><div>acl windowsupdate dstdomain automatedirstrprdweu.blob.core.windows.net</div><div>acl windowsupdate dstdomain automatedirstrprdneu.blob.core.windows.net</div><div>acl windowsupdate dstdomain play.google.com</div><div>acl windowsupdate dstdomain go.microsoft.com</div><div><br></div><div>acl CONNECT method CONNECT</div><div>acl wuCONNECT dstdomain www.update.microsoft.com</div><div>acl wuCONNECT dstdomain sls.microsoft.com</div><div>http_access allow CONNECT wuCONNECT localnet</div><div>http_access allow windowsupdate localnet</div><div><br></div><div>acl Safe_ports port 80 # http</div><div>acl Safe_ports port 443 # https</div><div>acl CONNECT method CONNECT</div><div><br></div><div>http_access allow allowedurl</div><div>http_access deny denylist</div><div>http_access allow localhost manager</div><div>http_access allow localhost</div><div>http_access allow localnet</div><div>http_access deny manager</div><div>http_access deny !Safe_ports</div><div>http_access deny all</div><div><br></div><div>http_port 8080</div><div><br></div><div>cache_dir ufs /var/spool/squid 10000 16 256</div><div>coredump_dir /var/spool/squid</div><div><br></div><div>refresh_pattern ^ftp: 1440 20% 10080</div><div>refresh_pattern ^gopher: 1440 0% 1440</div><div>refresh_pattern -i (/cgi-bin/|\?) 0 0% 0</div><div>refresh_pattern . 0 20% 4320</div><div>refresh_pattern -i windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims</div><div>refresh_pattern -i microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims</div><div>refresh_pattern -i windows.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims</div></div><br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr">Regards</div><div dir="ltr">Arjun K.</div></div></div></div></div>
</div>
</div></body></html>