<div dir="ltr"><div>ok i finally realised for myself why it wasnt working, thanks so much Matus!!!<br></div><div><br></div><div>
<span class="gmail-im">http_access allow activation - as this is at the top, allows all internet on ports 80 443, so the below is totally ignored <br></span>http_access allow whitelist<br>http_access allow whitelistreg<br>http_access deny all</div><div><br></div><div>
<span class="gmail-im">http_access allow activation
whitelist - only allows ports above only AND to the certain websites on the whitelist<br></span></div><div><span class="gmail-im">
<span class="gmail-im">http_access allow activation
whitelistreg - <span class="gmail-im">
<span class="gmail-im">only allows ports above only AND to the certain websites on the whitelist</span>reg</span>
</span></span></div><div><span class="gmail-im"><span class="gmail-im">
http_access deny all - denies all</span></span></div><div><span class="gmail-im"><span class="gmail-im"><br></span></span></div><div><span class="gmail-im"><span class="gmail-im">thanks Amos aswell for pointing out the ssl server name wouldnt do regex<br>
</span>
</span>
</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 15 Jul 2021 at 15:13, robert k Wild <<a href="mailto:robertkwild@gmail.com">robertkwild@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>this is all i have in my urlwhitereg file<br></div><div><br></div><div>\.vsb\.tawk\.to</div><div><br></div><div>so i will change it to the below?</div><div><br></div><div>
\.vsb\.tawk\.to$</div><div><br></div><div>also before i made all the changes it was working ie when these lines</div><div><br></div><div>
<span>http_access allow activation whitelist</span></div><div><span><br></span></div><div><span>it was only allowing those ports and anything in the urlwhite list ie the non regex ssl one and everything else ie that wasnt in the whitelist it was blocking<br></span>
</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 15 Jul 2021 at 14:02, Matus UHLAR - fantomas <<a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 15.07.21 13:54, robert k Wild wrote:<br>
>ok this hasnt worked, its allowing all the internet now ie urls<br>
<br>
improper regular expressions probably.<br>
Are you aware that regular expressions can match in the middle of string?<br>
you will need to use $ at the end of line e.g.<br>
<br>
\.com$<br>
<br>
to match .com domains (which is also reason to avoid regexps when posssible)<br>
<br>
>#HTTP_HTTPS whitelist websites<br>
>acl whitelist ssl::server_name "/usr/local/squid/etc/urlwhite.txt"<br>
><br>
>#HTTP_HTTPS whitelist websites regex<br>
>acl whitelistreg ssl::server_name_regex<br>
>"/usr/local/squid/etc/urlwhitereg.txt"<br>
<br>
>http_access allow activation<br>
<br>
this one should allow whole internet too.<br>
<br>
the standard squid config contains ACLs Safe_ports and SSL_ports along with <br>
directives to disallow using other ports, perhaps you should use those.<br>
<br>
>http_access allow whitelist<br>
>http_access allow whitelistreg<br>
>http_access deny all<br>
><br>
>On Thu, 15 Jul 2021 at 13:43, robert k Wild <<a href="mailto:robertkwild@gmail.com" target="_blank">robertkwild@gmail.com</a>> wrote:<br>
><br>
>> activation is an acl for ports, so<br>
>><br>
>> acl activation port 80 443 8090 9251 # office adobe web<br>
>><br>
>> On Thu, 15 Jul 2021 at 13:24, Matus UHLAR - fantomas <<a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a>><br>
>> wrote:<br>
>><br>
>>> On 15.07.21 13:08, robert k Wild wrote:<br>
>>> >#HTTP_HTTPS whitelist websites<br>
>>> >acl whitelist ssl::server_name "/usr/local/squid/etc/urlwhite.txt"<br>
>>> ><br>
>>> >#HTTP_HTTPS whitelist websites regex<br>
>>> >#acl whitelistreg ssl::server_name_regex<br>
>>> >"/usr/local/squid/etc/urlwhitereg.txt"<br>
>>> ><br>
>>><br>
>>> you must split those to two lines, as all ACLs must match for http_access<br>
>>> line to match:<br>
>>><br>
>>> http_access allow activation whitelist<br>
>>> http_access allow activation whitelistreg<br>
>>> http_access deny all<br>
>>><br>
>>> I only can guess what "activation" means.<br>
-- <br>
Matus UHLAR - fantomas, <a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a> ; <a href="http://www.fantomas.sk/" rel="noreferrer" target="_blank">http://www.fantomas.sk/</a><br>
Warning: I wish NOT to receive e-mail advertising to this address.<br>
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.<br>
"Two words: Windows survives." - Craig Mundie, Microsoft senior strategist<br>
"So does syphillis. Good thing we have penicillin." - Matthew Alton<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr"><div dir="ltr">Regards, <br><br>Robert K Wild.<br></div></div>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">Regards, <br><br>Robert K Wild.<br></div></div>