Re: [squid-users] /? can Defeat Squid's ACL

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Thu, 22 Aug 2002 10:53:00 +0200

Colin Contos wrote:
>
> Hi,
> We use Squid in our school to block offensive websites by using ACLs
> (domain names & ip addresses). All works well except if "/?" is added to
> the domain name the site is no longer blocked. Eg www.sex.com is blocked
> but www.sex.com/? is unblocked. I have included all variations of the
> domain name in the ACL but I can not overcome this problem. It means
> that students just have to add /? to the domain name to defeat Squid's
> ACLs.

What ACLs are you using?

To block domain names it is best to use the dstdomain ACL type.

To test regex expressions, use egrep

  echo "the_data_to_test" | egrep 'a_regex_expression'

Regards
Henrik
Received on Thu Aug 22 2002 - 02:53:23 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:48 MST