[squid-users] deny extensions not working for some https
Amos Jeffries
squid3 at treenet.co.nz
Mon May 11 00:04:35 UTC 2020
On 11/05/20 11:00 am, robert k Wild wrote:
> so i have made this
>
> #deny extension types
> acl exttype urlpath_regex -i "/usr/local/squid/etc/extdeny.txt"
> http_access deny exttype
>
> /usr/local/squid/etc/extdeny.txt
>
> \.exe(\?.*)?$
> \.msi(\?.*)?$
> \.msu(\?.*)?$
> \.zip(\?.*)?$
> \.iso(\?.*)?$
>
> the majority of websites it works, like 7zip, anydesk, teamviewer etc etc
>
> but when i go on this link below it downloads it and i dont know why
>
> https://www.microsoft.com/en-us/download/confirmation.aspx?id=5842
>
Because that URL does not contain any of the forbidden "file type" strings.
Amos
More information about the squid-users
mailing list