Re: [squid-users] Squid 2.2 and Ban sites

Emerson Renato Cavallari wrote:
>
> Hi people:
>
> I´m using SQUID 2.2 but now I´m with a problem.
> I want to ban some sites to some machines (by IP). I did it in squid.conf:
>
> acl publicas url_regex "/etc/squid/publicas_deny" src
> "/etc/squid/publicas_ip"
> http_access deny publicas

For a start you need to split that in two ACL's. One ACL can only be of
one type.

acl publicas_url url_regex "/etc/squid/publicas_deny"
acl publicas_ip src "/etc/squid/publicas_ip"
http_access deny publicas_url publicas_ip

> It works but it blocks site like:
> http://login.yahoo.com/config/login?.intl=us&.src=ygrp&.done=\
> http://groups.yahoo.com%2Fmygroups

This is because your publicas ACL did include the words src and all the
client IP's ad URL patterns that should be blocked for all users.

But still you are likely to have troubles because the patterns is very
broad. For example the pattern "sex" will also match words like "Sussex"

--
Henrik Nordstrom
Squid Hacker