[squid-users] block downloads

hi all

Sorry to bother you
I`m still having problems trying to block downloas
I`ve got a Debian runnig as a gateway 192.168.0.1/255.255.255.0
this is mi configuration file

http_port 8080
icp_port 3130
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
maximum_object_size 4096 KB
minimum_object_size 50 KB
pid_filename /var/run/squid.pid
acl localnet src 192.168.0.0/255.255.255.0
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow localnet
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
icp_access allow all
cache_effective_user proxy
cache_effective_group proxy
acl magic_words2 url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .rpm .zip
.rar .avi .mpeg
acl day time 09:00-18:15
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
log_icp_queries off
store_avg_object_size 50 KB

this is mi iptables rulset to Redirect to port 3128
iptables -t nat -D PREROUTING -s 192.168.0.0/255.255.255.0 -p tcp
--dport 80 -j REDIRECT --to-port 3128

thanks in advance
Received on Wed Jul 02 2003 - 14:54:40 MDT