[squid-dev] Block users dynamically

[Eliezer Croitoru]

I am pretty sure it was pointed towards Dean and the top\tip of thread.

But well also for ufdbGuard, have you ever considered using an external 
ACL helper api?
Or maybe an ICAP one?

..I can try to look at the ufdbGuard helper code and compile an ICAP 
service based on this but... only if someone needs or wants it.

Eliezer

On 2018-05-30 15:01, Marcus Kool wrote:
> On 30/05/18 08:55, Daniel Berredo wrote:
>> Have you ever considered using an external ACL helper?
> 
> eh, for what ?
> 
>> On Tue, May 29, 2018, 9:57 PM Marcus Kool <marcus.kool at urlfilterdb.com 
>> <mailto:marcus.kool at urlfilterdb.com>> wrote:
>> 
>> 
>>     On 28/05/18 15:10, dean wrote:
>>      > I am implementing modifications to Squid 3.5.27 for a thesis 
>> job. At some point in the code, I need to block a user. What I'm doing 
>> is writing to an external file that is used in the
>>     configuration,
>>      > like Squish does. But it does not block the user, however when 
>> I reconfigure Squid if it blocks it. Is there something I do not know? 
>> When I change the file, should I reconfigure Squid? Is there
>>      > another way to block users dynamically from the Squid code?
>> 
>>     You can use ufdbGuard for this purpose.  ufdbGuard is a free URL 
>> redirector for Squid which can be configured to read lists of 
>> usernames or list of IP addresses every X minutes (default for X is 
>> 15).
>>     So if you control a blacklist with usernames and write the name of 
>> the user to a defined file, ufdbguardd will block these users.
>>     If the user must be blocked immediately you need to reload 
>> ufdbguardd, otherwise you wait until the configured time interval to 
>> reread the userlist expires and so after a few minutes the user gets
>>     blocked.
>> 
>>     Note that reloading ufdbguardd does not interfere with Squid and 
>> all activity by browsers and squid continues normally.
>> 
>>     Marcus
>> 
>>     _______________________________________________
>>     squid-dev mailing list
>>     squid-dev at lists.squid-cache.org 
>> <mailto:squid-dev at lists.squid-cache.org>
>>     http://lists.squid-cache.org/listinfo/squid-dev
>> 
> _______________________________________________
> squid-dev mailing list
> squid-dev at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-dev

-- 
----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer at ngtech.co.il