[squid-users] URL/P2P blocking

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
Finally,

read this thread too:

http://www.spinics.net/lists/squid/msg81113.html

Some questions already answered here.

05.05.16 3:26, Yuri Voinov пишет:
>
> As a part of solution I recommend (by my own experience) consider to
use this:
>
> https://www.urlfilterdb.com/products/ufdbguard.html
>
> But I repeat: this is NOT magic button "Disable all". This is
relatively effective tool to block categories.
>
> This is only URL/HTTP based tool, which required some more forces to
use it with HTTPS.
> And this can't be other means to replace when it comes to other protocols.
>
> Squid is only HTTP/HTTPS proxy. Not at all existing protocols.
>
> 05.05.16 3:18, Yuri Voinov пишет:
>
>
>       > Generally, for effective blocking of everything better design
>       would first consider - as everyone and everything is engeneered,
>
>       > and then look for the magic button "to disable all to hell."
>
>
>
>       > Then it becomes clear what is possible and what means - and
>       what is not.
>
>
>
>       > Especially P2P - this is at all not about Squid.
>
>
>
>       > 05.05.16 3:11, Yuri Voinov пишет:
>
>
>
>
>
>       >       > Facebook uses Akamai as background CDN, so you
>       need to block
>
>       >       Akamai (related URL's, which can be difficult, so
>       consider to use
>
>       >       Cisco NBAR DPI functionality). too in case to
>       completely block FB.
>
>
>
>
>
>
>
>       >       > YT still uses QUIC/SPDY, so read this
>
>
>
>
>
>
>
>
>
>
>       http://wiki.squid-cache.org/KnowledgeBase/Block%20QUIC%20protocol
>
>
>
>
>
>
>
>       >       > About P2P/Torrents said enough here
>
>
>
>
>
>
>
>       >       >
>       http://wiki.squid-cache.org/ConfigExamples/TorrentFiltering
>
>
>
>
>
>
>
>       >       > Note: Using Cisco NBAR required valid service
>       contract.
>
>       >       Protocol packs is not lying at all angles, and are
>       updated
>
>       >       monthly.
>
>
>
>
>
>
>
>
>
>
>
>       >       > 05.05.16 3:04, Maile Halatuituia пишет:
>
>
>
>
>
>
>
>
>
>
>
>       >       >       > ​Someone with ideas on how to block
>
>       >       Facebook,Youtube, P2P
>
>
>
>       >       >       Traffic though my squid box. Facebook seems
>       to be
>
>       >       working but
>
>
>
>       >       >       likely some users bypass to youtube.com and
>       the rest
>
>       >       are blocked.
>
>
>
>       >       >       Also am looking to block P2P traffic , BITS
>       proticols,
>
>       >       etc etc
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>       >       >       > Cheers
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>       >       >       > Confidentiality Notice: This email
>       (including any
>
>       >       attachment)
>
>
>
>       >       >       is intended for internal use only. Any
>       unauthorized
>
>       >       use,
>
>
>
>       >       >       dissemination or copying of the content is
>       prohibited.
>
>       >       If you are
>
>
>
>       >       >       not the intended recipient and have received
>       this
>
>       >       e-mail in error,
>
>
>
>       >       >       please notify the sender by email and delete
>       this email
>
>       >       and any
>
>
>
>       >       >       attachment.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>       >       >       >
>       _______________________________________________
>
>
>
>
>
>
>
>       >       >       > squid-users mailing list
>
>
>
>
>
>
>
>       >       >       > squid-users at lists.squid-cache.org
>
>
>
>
>
>
>
>       >       >       >
>       http://lists.squid-cache.org/listinfo/squid-users
>
>
>
>
>
>
>
>
>
>
>
>
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXKmmSAAoJENNXIZxhPexG2jQIAJ5pQcfnv12LW2wg7ygamFZt
+ms5HjYM+/vB0k7Zg5lxp/cnJeKEFV3cGH4fPFHekh0Qt3sL1ttzauqfnf0rOELA
xFg+7XuQ8VgXF7+eBqmnvu2k7yjDqE8OjJUcssiBEmBvRQFFLSclAuyM9gWIKBDT
VPN9XkvwPN2zo5NsBg/7zgFUmKfant1pWNh/2bObBoUo3+kL4bGzPfDUoO251RxU
mrZLff3rgAw9RdYhy5JX3AICYXke9CDrLZcQHJ/4BSlSpmYOq0YBHWqd+rqMEeZO
Zn7hQcpKd1Dw4XaEo6BuVy6Pg7aFXFiaPzzXsSPzKIWSYOIT9AcEppDBQKNppa8=
=tkwj
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160505/56c6f287/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x613DEC46.asc
Type: application/pgp-keys
Size: 2437 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160505/56c6f287/attachment.key>