Question About ACL

Hi,

I have an ACL entry based on "dstdomain" in "squid.conf" as the following:

acl adulturl dstdomain "/usr/local/squid/etc/adult/fw.f"
.
.
.
http_access deny adulturl all

Suppose the file of fw.f contains only one entry as:

xxxhotmail.com

As far as I know, that means Squid is supposed to prevent me from accessing to
any site which is DERIVED from xxxhotmail (e.g. www.xxxhotmail.com, etc.). But
it also prevents me from accessing to every other site which is a part of
xxxhotmail.com, like: "mail.com". I think that's not a logical way to block,
because it's obvious that "mail.com" or "hotmail.com" is not a subdomain of
"xxxhotmail.com".

Now, my first question: is my above mentioned explanation is correct? Or maybe I
make a mistake which lead to such a result?

My second question: if it's correct and true, what can I do to have a fairly
mistake-free system for blocking porn, without using regular expression?

every small comment would be appreciated,
thanks in advance,
Nazila M.
Received on Thu Dec 30 1999 - 05:04:21 MST