[squid-users] Maxon App

[Matus UHLAR - fantomas]

>On 17/04/25 01:28, Adam Barnett wrote:
>>Has anyone managed to get the maxon application working via squid?
>>I have added all the IP's and URL that they have given us but it 
>>still does not work, just sit on "Loading application" after 
>>signing in.
>>
>>There is nothing in the logs and i even did a wirehark and an still 
>>nothing that i could see.
>>
>>
>>This is the section from my config
>>
>>acl dst_maxon_domains url_regex .maxon.net
>>acl dst_maxon_domains url_regex id.maxon.net
>>acl dst_maxon_domains url_regex packages.maxon.net
>>acl dst_maxon_domains url_regex asset.maxon.net
>>acl dst_maxon_domains url_regex cloudfront.net
>>acl dst_maxon_domains url_regex cloudflare.com
>>acl dst_maxon_domains url_regex recaptcha.net
>>acl dst_maxon_domains url_regex fonts.googleapis.com
>>acl dst_maxon_domains url_regex zbrushcentral.com
>>acl dst_maxon_domains url_regex mini-cart.widget.maxon.net
>>acl dst_maxon_domains url_regex recaptcha.net
>>acl dst_maxon_domains url_regex cacerts.digicert.com
>>acl dst_maxon_domains url_regex ts-aia.ws.symantec.com
>>acl dst_maxon_domains url_regex rb.symcb.com
>>acl dst_maxon_domains url_regex static.edge.microsoftapp.net
>>acl dst_maxon_domains url_regex cookiebot.com
>>acl dst_maxon_domains url_regex maxon-prod.eu-west-1.elasticbeanstalk.com

On 17.04.25 11:07, Amos Jeffries wrote:
>Several problems with the above.
>
>1) these are dstdomain patterns. Not regex.
>  Currently


perhaps you prematurely hit send but I add:

use "dstdomain -n .maxon.net"
- this prevents from resolving if client provides IP Address


>2) The entry for " .maxon.net " overlaps with all of these (and more):
>
>> acl dst_maxon_domains url_regex id.maxon.net
>> acl dst_maxon_domains url_regex packages.maxon.net
>> acl dst_maxon_domains url_regex asset.maxon.net
>> acl dst_maxon_domains url_regex mini-cart.widget.maxon.net
>
>you can remove those extras.

With url_regex squid shouldn't notice, with "dstdomain" would complain.


url_regex is horribly ineffective and has unexpected consequences

- "." applies for any character unless escaped
- applies within strings

e.g.
url_regex .maxon.net

matches

"ourmaxonanet.com"

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
On the other hand, you have different fingers.