[squid-users] ACL to block installation program

[brendan kearney]

Be warned...  a web server can be configured to send an arbitrary mime type
for any file.  You may find .jar files with a mime type of html/text.  Also
zipping a jar circumvents this check.  Some ICAP servers have a "true
content type" check that does not rely on the headers which can be forged,
but actually looks at the file that was requested.
On Apr 10, 2015 5:00 AM, "Yuri Voinov" <yvoinov at gmail.com> wrote:

>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> http://wiki.squid-cache.org/ConfigExamples/BlockingMimeTypes
>
>
> 10.04.15 14:48, Fiorenza Meini пишет:
> > Hi,
> > is there a way to filter and block update programs which come from
> Internet, for example java update or windows update , withouth using the
> url of the web site, but working with  header/mime types ?
> >
> > Thanks and regards
> >
> > Fiorenza Meini
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQEcBAEBCAAGBQJVJ5EoAAoJENNXIZxhPexGJR4H/2z4EeMqAzLUda+uvtYwseCY
> xxUwFOMw6Pj5/5RYaqoLjio07RxbOsSS3Tw4NsKlbtGoBD5NZ1haKKak6dn4iGg2
> fd0KlkqxG7XgKAtFJhS8+Gk3lMPRENOX6gM09GmY0Ua4Q6nvtH75xvBXqNhG/wut
> eS8AXINbwTDi6ciWbtUXLgyeAhQwE9C++8zvTq3UPHv359H8s7HyA6CT6QFvhJtS
> pHEqlzbt8daU+wyiiHA9k/DUfjynjHJJgYGUtOiTHrScWFymtqnqo9sKvfR4UbFb
> HNi3gfRPtV2pw0igof69m8AGKrihEQqt6YUxgDtHjsogvaFZFc8MIyui64zC6Sg=
> =uMVo
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20150410/1a045f07/attachment.html>