Re: [squid-users] how to make squid error message depend on a specific acl? + problem

Not by looking at the URL alone no.

In Squid-2.5 there will be an access method for verifying access agains
the returned mime type of the reply.

You can also try to play with size limitations instead of trying to
block downloads by file extension.

--
Henrik Nordstrom
Squid hacker
Girts Bitenieks wrote:
> 
> yes, but, do you have any idea how to fix it? or is there another way for
> dissabling exe, & com files download?
> 
> -gb
> 
> -----Original Message-----
> From: hno@hem.passagen.se [mailto:hno@hem.passagen.se]
> Sent: tre?diena, 2001. gada 14. marta 23:11
> To: Girts Bitenieks
> Subject: Re: [squid-users] how to make squid error message depend on a
> specific acl? + problem
> 
> I guess you realize why yourself.
> 
> /Henrik
> 
> Girts Bitenieks wrote:
> >
> > thank you, i fixed this with deny_info!
> >
> > i got another problem now. i dissabled mp3, video, & other file download
> by
> > specifying in the txt file those extensions, but i cant use exe,., if i do
> > so, the some exe scripts wont load....
> > using Squid/2.3.STABLE4 on OpenBSD 2.7-stable
> > my conf:
> > ---------------
> > acl denied_filetypes    urlpath_regex -i "/etc/squid/denied_filetypes.txt"
> > http_access     allow           itdep
> > http_access     deny            denied_filetypes
> > deny_info       err_filetypes_denied.html denied_filetypes
> > -----------
> > txt file like this:
> > -------------
> >
> > #\.exe$
> > \.afx$
> > \.arj$
> > \.asf$
> > .....
> > ----------
> >
> > -gb
> >
> > -----Original Message-----
> > From: hno@hem.passagen.se [mailto:hno@hem.passagen.se]
> > Sent: tre?diena, 2001. gada 14. marta 8:57
> > To: Girts Bitenieks
> > Cc: squid-users@ircache.net
> > Subject: Re: [squid-users] how to make squid error message depend on a
> > specific acl? + problem
> >
> > Girts Bitenieks wrote:
> >
> > > http_access     deny            denied_filetypes
> > > deny_info       err_filetypes_denied.html denied_filetypes
> > >
> > > works well!!!!
> > >
> > > but, once I want to add exception to group !happy_group = the specified
> > > error message doesn't appear any more, but instead default
> > > ERR_ACCESS_DENIED........... :(
> > > any ideas?
> >
> > HOW do you add the exception? The ordering of the acl names in
> > http_access is very important when using deny_info, as deny_info matches
> > the LAST acl name on the http_access line.
> >
> > --
> > Henrik Nordstrom
> > Squid Hacker