[squid-users] allowing zip only for a specific url regex

[robert k Wild]

cool thanks Amos :)

if your interested these are my lines in my config

#allow special URL paths
acl special_url url_regex "/usr/local/squid/etc/urlspecial.txt"

#deny MIME types
acl mimetype rep_mime_type "/usr/local/squid/etc/mimedeny.txt"
http_reply_access allow special_url
http_reply_access deny mimetype

urlspecial.txt

http://updater.maxon.net/server_test
http://updater.maxon.net/customer/R21.0/updates15
http://updater.maxon.net/customer/general/updates15
^http://ccmdl.adobe.com/AdobeProducts/KCCC/1/win64/packages/.*
^http://ccmdl.adobe.com/AdobeProducts/KCCC/1/osx10/packages/.*
^http://www.eztitles.com/download.php?
^https://attachments.office.net/owa/.*

mimedeny.txt

application/octet-stream
application/x-msi
application/zip
application/vnd.ms-cab-compressed

is this the best way of doing it?

thanks,
rob


On Tue, 5 May 2020 at 13:27, Amos Jeffries <squid3 at treenet.co.nz> wrote:

> On 5/05/20 11:38 pm, robert k Wild wrote:
> > hi all,
> >
> > i wanto to allow only zip files via a specific url regex
> >
> > atm im allowing all attachments
> >
> > ^https://attachments.office.net/owa/.*
> >
> > could i do this to lock it down to only zips
> >
> > ^https://attachments.office.net/owa/.zip
> >
>
> That regex will only match a small set of URLs which are unlikely ever
> to exist.
>
> What you want is:
>
>  acl downloads url_regex https://attachments.office.net/owa/
>  acl dotZip urlpath_regex \.zip(\?)?.*$
>  http_access allow downloads !dotZip
>
>  acl zipCt rep_header Content-Type application/zip
>  http_reply_access deny zipCt
>
>
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>


-- 
Regards,

Robert K Wild.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20200505/5bfa30f5/attachment.html>