[squid-users] Squid Proxy not blocking websites

[Arjun K]

Hi All
The below is the configuration defined in the proxy server.The issue is that the proxy is not blocking the websites mentioned in a file named denylist.txt.
Kindly let me know what needs to be changed to block the websites.


####IP Ranges allowed to use proxyacl localnet src 10.196.0.0/16
acl localnet src 10.197.0.0/16acl localnet src 10.198.0.0/16acl localnet src 10.199.0.0/16acl localnet src 10.200.0.0/16
####Allowed and Denied URLsacl allowedurl dstdomain /etc/squid/allowed_url.txtacl denylist dstdomain /etc/squid/denylist.txt
acl windowsupdate dstdomain windowsupdate.microsoft.comacl windowsupdate dstdomain .update.microsoft.comacl windowsupdate dstdomain download.windowsupdate.comacl windowsupdate dstdomain redir.metaservices.microsoft.comacl windowsupdate dstdomain images.metaservices.microsoft.comacl windowsupdate dstdomain c.microsoft.comacl windowsupdate dstdomain www.download.windowsupdate.comacl windowsupdate dstdomain wustat.windows.comacl windowsupdate dstdomain crl.microsoft.comacl windowsupdate dstdomain sls.microsoft.comacl windowsupdate dstdomain productactivation.one.microsoft.comacl windowsupdate dstdomain ntservicepack.microsoft.comacl windowsupdate dstdomain eu.vortex-win.data.microsoft.comacl windowsupdate dstdomain eu-v20.events.data.microsoft.comacl windowsupdate dstdomain usseu1northprod.blob.core.windows.netacl windowsupdate dstdomain usseu1westprod.blob.core.windows.netacl windowsupdate dstdomain winatp-gw-neu.microsoft.comacl windowsupdate dstdomain winatp-gw-weu.microsoft.comacl windowsupdate dstdomain wseu1northprod.blob.core.windows.netacl windowsupdate dstdomain wseu1westprod.blob.core.windows.netacl windowsupdate dstdomain automatedirstrprdweu.blob.core.windows.netacl windowsupdate dstdomain automatedirstrprdneu.blob.core.windows.netacl windowsupdate dstdomain play.google.comacl windowsupdate dstdomain go.microsoft.com
acl CONNECT method CONNECTacl wuCONNECT dstdomain www.update.microsoft.comacl wuCONNECT dstdomain sls.microsoft.comhttp_access allow CONNECT wuCONNECT localnethttp_access allow windowsupdate localnet
acl Safe_ports port 80 # httpacl Safe_ports port 443 # httpsacl CONNECT method CONNECT
http_access allow allowedurlhttp_access deny denylisthttp_access allow localhost managerhttp_access allow localhosthttp_access allow localnethttp_access deny managerhttp_access deny !Safe_portshttp_access deny all
http_port 8080
cache_dir ufs /var/spool/squid 10000 16 256coredump_dir /var/spool/squid
refresh_pattern ^ftp:           1440    20%     10080refresh_pattern ^gopher:        1440    0%      1440refresh_pattern -i (/cgi-bin/|\?) 0     0%      0refresh_pattern .               0       20%     4320refresh_pattern -i windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-imsrefresh_pattern -i microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-imsrefresh_pattern -i windows.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims



RegardsArjun K.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20200503/343cf3e0/attachment-0001.html>