[squid-users] pattern match on User-Agent header

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
https://regex101.com is useful to check regexp for correctness.

21.11.15 3:37, Berkes, David пишет:
> Hello.
> I'm trying to create an ACL browser type to allow any User-Agent
header with the string iPhone.  I have tried this ACL various ways and
cannot get it to work.  Any help with the correct setup and/or regexp
would be much appreciated. I have the ACL's commented out as when they
are enabled, everything is allowed to pass without hitting the
authentication.
>
> ### MY ACL's
> acl iphone1 browser [(.*)(iPhone)(.*)]
> acl iphone2 browser [.*\QiPhone\E.*]
>
> ### ACCESS.LOG
> sc.iasds01.com xxx.xxx.xxx.xxx - - [20/Nov/2015:15:12:26 -0600]
"CONNECT sc.iasds01.com:80  HTTP/1.1" 200 172 "-" "Mozilla/5.0 (iPhone;
CPU iPhone OS 9_0 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like
Gecko) Version/9.0 Mobile/13A344 Safari/601.1" TCP_TUNNEL:HIER_DIRECT
>
>
>
> ### squid.conf
> auth_param basic program /usr/lib64/squid/basic_ncsa_auth
/etc/squid/squid_passwd
> acl iphone1 browser [(.*)(iPhone)(.*)]
> acl iphone2 browser [.*\QiPhone\E.*]
>
> acl ncsa_users proxy_auth REQUIRED
>
> http_access allow manager localhost
> #http_access allow iphone1
> #http_access allow iphone2
> http_access allow ncsa_users
> http_access deny all
>
> ________________________________
>
> Piper Jaffray & Co. Since 1895. Member SIPC and NYSE. Learn more at
www.piperjaffray.com. Piper Jaffray corporate headquarters is located at
800 Nicollet Mall, Minneapolis, MN 55402.
>
> Piper Jaffray outgoing and incoming e-mail is electronically archived
and recorded and is subject to review, monitoring and/or disclosure to
someone other than the recipient. This e-mail may be considered an
advertisement or solicitation for purposes of regulation of commercial
electronic mail messages. If you do not wish to receive commercial
e-mail communications from Piper Jaffray, go to:
www.piperjaffray.com/do_not_email to review the details and submit your
request to be added to the Piper Jaffray "Do Not E-mail Registry." For
additional disclosure information see www.piperjaffray.com/disclosures
>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJWT5OaAAoJENNXIZxhPexGBKQH/1YNTXac6cQNqn6Fei7rxGxm
56O27xAMoQyW3Yo3/5msbCEA99yMBrOWg1IfjRrDnUxBNbFdor2OpkumOq3vmWws
Yggv+bqP9C3vFYC+nj1rmQCsGuprU8BQ4wuM+2eLodrZp01oM3z6XqWUmJ3RbXY2
DG/BvQMxC6xSNiAoMYIfpkTxwkEkKJ1PfdJQTdq1s+gQY/jNZZ5fOicSmORqDof9
UplkfduuUquimvKCJ1R6i79WLAbcMcmTEnL1GXryAy2PVKzFLs6q0+UNPiyBVpOa
ARlnyEbgeV1ajBJlYq1moCbdGFGknCNIEYeCgrdtSdaTGOpXRKP0YrtT2vQqsw0=
=I/N6
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151121/be829f92/attachment.html>