[squid-users] Squid + Squidguard Youtube URL video filtering

[Rafael Akchurin]

Hello Roberto,

Another way is to have a dedicated YouTube API rewriter or say ICAP filter (as we do in Web Safety version 6.4) and try to allow/block video by parsing out the video ID from request URL and looking up its related meta information on the fly in YouTube database.

See our rewriter in Web Safety ICAP filter for Squid available as part of virtual appliance at https://www.diladele.com/virtual_appliance.html.  The code in Python in /opt/websafety/bin/youtube_guard.py and if very easy to understand.

Please note our guard assumes the video partials from googlevideo.com are allowed. If you need to further prevent access to these partials and allow only your video no matter what - then keeping a close eye on the https://github.com/rg3/youtube-dl project is a must.

Please note in Web Safety 6.4 (ICAP for Squid) we have rewritten that functionality in golang to allow specifying different allow/deny videos/categories/channels per different group of proxy users. So be sure to get version 6.3.

Best regards,
Rafael Akchurin
Diladele B.V.
https://www.diladele.com

 

-----Original Message-----
From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of Roberto Carna
Sent: Thursday, August 16, 2018 9:51 PM
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Squid + Squidguard Youtube URL video filtering

Dear Amos, I've tried to sniff the HTTP requests when I ask for:

https://www.youtube.com/embed/ff9sDLGtnK8?rel=0&showinfo=0

After that I've created a Squidguard exception list as below:

ytimg.com
googlevideo.com
googleapis.com
www.youtube.com/embed/ff9sDLGtnK8?rel=0&showinfo=0

But I can't see the video yet.

Please I need to know if using Squidguard it's just impossible to do this exception, so in this case I forget it.

Thanks a lot again!!!


2018-08-16 10:17 GMT-03:00 Amos Jeffries <squid3 at treenet.co.nz>:
> On 17/08/18 00:43, Roberto Carna wrote:
>> Dear, I have Squid + Squidguard working OK.
>>
>> Squidguard is filtering the entire www.youtube.com website.
>>
>> But now I have to permit just one video from Youtube:
>>
>> https://www.youtube.com/embed/ff9sDLGtnK8?rel=0&showinfo=0
>>
>> I have added the below URL as an exception in Squidguard:
>>
>> www.youtube.com/embed/ff9sDLGtnK8?rel=0&showinfo=0
>>
>> but after that I can't see it, still blocked.
>>
>> How can I enable just this URL from Squidguard preferently blocking 
>> the rest of Youtube ???
>
> Unfortunately only with a great deal of difficulty.
>
> The "?v=..." and "/embed/..." URLs are just public identifiers to 
> access the YouTube APIs. At the HTTP level they result in a quite long 
> series of sub-requests, redirections and the like bouncing all over 
> the
> youtube.* and googlevideos.* and googleapis.* domains.
>  Yes all of them are involved multiple times. So whitelisting is an 
> all-or-nothing prospect, with other G services being implicitly 
> whitelisted as side effects.
>
>
> Also, whenever the way to decipher the above maze of traffic gets 
> published so we can do things like what you ask. YT shortly afterwards 
> change how it operates - usually towards even more complexity. This 
> has happened too many times to be coincidence IMO.
>
>
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users