[squid-users] URL/P2P blocking

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
As a part of solution I recommend (by my own experience) consider to use
this:

https://www.urlfilterdb.com/products/ufdbguard.html

But I repeat: this is NOT magic button "Disable all". This is relatively
effective tool to block categories.

This is only URL/HTTP based tool, which required some more forces to use
it with HTTPS.
And this can't be other means to replace when it comes to other protocols.

Squid is only HTTP/HTTPS proxy. Not at all existing protocols.

05.05.16 3:18, Yuri Voinov пишет:
>
> Generally, for effective blocking of everything better design would
first consider - as everyone and everything is engeneered,
> and then look for the magic button "to disable all to hell."
>
> Then it becomes clear what is possible and what means - and what is not.
>
> Especially P2P - this is at all not about Squid.
>
> 05.05.16 3:11, Yuri Voinov пишет:
>
>
>       > Facebook uses Akamai as background CDN, so you need to block
>       Akamai (related URL's, which can be difficult, so consider to use
>       Cisco NBAR DPI functionality). too in case to completely block FB.
>
>
>
>       > YT still uses QUIC/SPDY, so read this
>
>
>
>
>       http://wiki.squid-cache.org/KnowledgeBase/Block%20QUIC%20protocol
>
>
>
>       > About P2P/Torrents said enough here
>
>
>
>       > http://wiki.squid-cache.org/ConfigExamples/TorrentFiltering
>
>
>
>       > Note: Using Cisco NBAR required valid service contract.
>       Protocol packs is not lying at all angles, and are updated
>       monthly.
>
>
>
>
>
>       > 05.05.16 3:04, Maile Halatuituia пишет:
>
>
>
>
>
>       >       > ​Someone with ideas on how to block
>       Facebook,Youtube, P2P
>
>       >       Traffic though my squid box. Facebook seems to be
>       working but
>
>       >       likely some users bypass to youtube.com and the rest
>       are blocked.
>
>       >       Also am looking to block P2P traffic , BITS proticols,
>       etc etc
>
>
>
>
>
>
>
>       >       > Cheers
>
>
>
>
>
>
>
>       >       > Confidentiality Notice: This email (including any
>       attachment)
>
>       >       is intended for internal use only. Any unauthorized
>       use,
>
>       >       dissemination or copying of the content is prohibited.
>       If you are
>
>       >       not the intended recipient and have received this
>       e-mail in error,
>
>       >       please notify the sender by email and delete this email
>       and any
>
>       >       attachment.
>
>
>
>
>
>
>
>
>
>
>
>       >       > _______________________________________________
>
>
>
>       >       > squid-users mailing list
>
>
>
>       >       > squid-users at lists.squid-cache.org
>
>
>
>       >       > http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXKmjzAAoJENNXIZxhPexGb+QH/iHk6tT2poZdpt0wgfjUmRaK
nHwSQIBvt1K5ntbB948AGQb+mcbLTn74oLafdmiV41CirSs4v/ZRT4c1gQ9mY3Pp
xm5tLX9L9180KOMWShqALjtFUedM7lgN85whB+JDk4SPJjz4LmYsn/6sbzauo4kN
PaGlyGYkvwFGmfNcalzrmlVFMxHQGrxSkw6j0vqICPd448/arJDNuWJOIbUbaAP5
YP76XQI9DlolwofYewB0t8675mSbq+ehJCwf2bA2t6331kVXjy4NyoLMxA63Ef33
bGzrhenBFj5fMx/KexRkEm9/qpAv1NP91DgwSW5R15XpgtKyrNVpOdkJMsnHGU8=
=Q7Aj
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160505/20d8a265/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160505/20d8a265/attachment-0001.key>