[squid-users] i want to block images with size more than 40 KB

Tue Mar 24 20:58:04 UTC 2015

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Don't think so.

Probably you'll have to write your own helper to handle dynamic
content. Or use the content adaptaion feature.

25.03.15 11:34, snakeeyes пишет:
> BTW   can squid block dynamically loaded images, and ajax request
> which return images. I want that on yahoo and google Is that
> possible ? ========================= , thanks  it seems okay for
> normal http sites
> 
> I want to ask , is there a trick can we do it so that it be applied
> to google & yahoo images search ??
> 
> Here is wt I see in yahoo logs , just small logs and all images are
> allowed and not blocked =====
> 
> 1426881748.078  70740 x.70 TCP_MISS/200 11790 CONNECT
> js.dmtry.com:443 - DIRECT/184.170.128.58 - 1426881749.077    103
> xx.70 TCP_MISS/200 2228 POST http://sd.symcd.com/ -
> DIRECT/23.9.123.27 application/ocsp-response 1426881749.752     29
> xx.70 TCP_MISS/200 2228 POST http://sd.symcd.com/ -
> DIRECT/23.9.123.27 application/ocsp-response 1426881750.098     21
> xx.70 TCP_MISS/200 393 GET http://ping.chartbeat.net/ping? -
> DIRECT/23.21.149.132 image/gif 1426881750.731  62443 xx.70
> TCP_MISS/200 122185 CONNECT www.gstatic.com:443 -
> DIRECT/206.126.112.185 - 1426881751.476   xx.70 TCP_MISS/200 4191
> CONNECT secure.footprint.net:443 - DIRECT/8.12.219.125 - 
> 1426881752.215    505 xxx.70 TCP_MISS/200 459 CONNECT
> secure.footprint.net:443 - DIRECT/8.12.219.125 - 1426881753.005
> 1091 xx.70 TCP_MISS/200 5303 CONNECT av.beap.bc.yahoo.com:443 -
> DIRECT/76.13.28.21 - 1426881762.280  12994 188.161.107.70
> TCP_MISS/200 5502 CONNECT d.adgear.com:443 - DIRECT/205.204.71.140
> - 1426881764.215  16497 xx70 TCP_MISS/200 9832 CONNECT
> ads.yahoo.com:443 - DIRECT/98.139.225.43 - 1426881764.216  16453
> x.70 TCP_MISS/200 6534 CONNECT ads.yahoo.com:443 -
> DIRECT/98.139.225.43 - 1426881765.044  18777 x.70 TCP_MISS/200
> 11132 CONNECT ads.yahoo.com:443 - DIRECT/98.139.225.43 - 
> 1426881765.681  15193 xx.107.70 TCP_MISS/200 6225 CONNECT
> comet.yahoo.com:443 - DIRECT/72.30.196.161 - 1426881765.691  14149
> xx.107.70 TCP_MISS/200 832 CONNECT comet.yahoo.com:443 -
> DIRECT/72.30.196.161 - 1426881766.046 116219 xx.70 TCP_MISS/200 529
> CONNECT d31qbv1cthcecs.cloudfront.net:443 - DIRECT/54.230.16.189 - 
> 1426881766.714    296 xx.70 TCP_MISS/200 2228 POST
> http://ocsp.verisign.com/ - DIRECT/23.9.123.27
> application/ocsp-response 1426881770.049 117609 xx107.70
> TCP_MISS/200 711 CONNECT d5nxst8fruw4z.cloudfront.net:443 -
> DIRECT/54.240.160.97 - 1426881780.403  67786 xx.70 TCP_MISS/200 852
> CONNECT www.yahoo.com:443 - DIRECT/98.139.180.149 - 1426881781.519
> 353 xx.70 TCP_MISS/200 571 GET
> http://data.cnn.com/jsonp/breaking_news/domestic.json? -
> DIRECT/157.166.249.67 application/javascript 1426881782.057 118788
> xx.70 TCP_MISS/200 19972 CONNECT cdn2sitescout-a.akamaihd.net:443 -
> DIRECT/23.15.4.18 - 1426881790.558  71055 xx TCP_MISS/200 26805
> CONNECT s.yimg.com:443 - DIRECT/206.190.56.191 - 1426881814.445
> 100461 xx TCP_MISS/200 124129 CONNECT ca.yahoo.com:443 -
> DIRECT/98.139.180.149 - 1426881818.437  70709 xx70 TCP_MISS/200
> 8503 CONNECT beap-bc.yahoo.com:443 - DIRECT/206.190.57.60 -
> 
> 
> regards
> 
> -----Original Message----- From: Amos Jeffries
> [mailto:squid3 at treenet.co.nz] Sent: Friday, March 20, 2015 9:56 AM 
> To: snakeeyes Cc: squid-users at lists.squid-cache.org Subject: Re:
> [squid-users] i want to block images with size more than 40 KB
> 
> On 21/03/2015 12:05 p.m., snakeeyes wrote:
>> Hi amos , thanks for reply I have tried @ top of squidf.conf
>> 
>> acl images rep_header Content-Type ^image/ ^x-image/ acl small 
>> rep_header Content-Length ^[1234]?[0-9]$ http_reply_access deny
>> small images
>> 
>> are you sure that its blocking images with size >40KB ????
> 
> Sorry I slightly mis-read your request. What I gave is blocking
> images *smaller* than 40 bytes (see what I mean about cut-n-paste
> without understanding?).
> 
> To block images *over* 40 bytes change that to: http_reply_access
> deny !small images
> 
> 
>> also I didn’t see extensions like jpg or bmp or similar like that
>> ??!!
> 
> Because HTTP does not transfer files. It transfers data. Sometimes
> data can *also* be found inside "files", sometimes not.
> 
> HTTP Content-Type header describes what format the data is. In this
> case you requested images in general, so thats the pattern I gave.
> 
> Amos
> 
> _______________________________________________ squid-users mailing
> list squid-users at lists.squid-cache.org 
> http://lists.squid-cache.org/listinfo/squid-users
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJVEc/cAAoJENNXIZxhPexGXQoH/3Av/ylPj06Pjdd75yqC/Z9n
vDhkFqIQcfxC0ErLcRk1Zp2tNJi8LFFDS4qNys9dlj2A5yloQ5ymXZA39ehJMFgo
s4G6gXWM+KvXaaQ/W5AZodEW2Q3NrOlyhKn58VyHEud4KIg7a8tt7RKywxgY7+Ff
sTEg/FqvWawhkCCmO8WhSzauD9if30vdwjXXLh3BsWD2J3JmC9pylqBn3vGkANMF
Zj+ycq6EkZykPfTSD+wIKw+XovDp3dNFtF7BEyjnCVsJJVW7aJqDMx0fl1N7JAhV
qy9zuIBvop3s4aEZhCufn6+uVIFiaJ2hQ02OyIeAOlBX+moUT5/3We4SrOPWB1M=
=cM6V
-----END PGP SIGNATURE-----