[squid-users] Skype issue

[Amos Jeffries]

On 5/06/2015 12:05 a.m., rocaembole wrote:
> here's my squid.conf
> 
> ##NTLM
> #
> ##DECLARED
> auth_param ntlm program /usr/bin/ntlm_auth
> --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 5
> auth_param ntlm keep_alive on
> 
> external_acl_type ntlm_group ttl=f3600 children=100 %LOGIN
> /usr/lib/squid3/wbinfo_group.pl
> 
> ##SRC
> 
> acl administrador external ntlm_group "/etc/squid3/lists/UserSkype.lst"

> acl numeric_IPs dstdom_regex
> ^(([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)|(\[([0-9af]+)?:([0-9af:]+)?:([0-9af]+)?\])):443
> acl Skype_UA browser ^skype
> acl validUserAgent browser \S+
> http_access deny numeric_IPS Skype_UA !validUserAgent !administrador
> http_access allow numeric_IPS Skype_UA validUserAgent administrador
> http_access deny numeric_IPS 
> http_access deny Skype_UA
> http_access deny !validUserAgent
> ## *MAYBE I'M HAVING A SYNTAX PROBLEM?*

This config example cut-n-pasted from the wiki tutorial on *Blocking
Skype* seems to be doing exactly what it was designed for. Delivering a 403.


Amos