On Mon, 22 Mar 2004, Frank Fegert wrote:
> Hi all,
>
> i'm looking for a way to block certain file downloads within squid. I
> currently apply a list of filename extensions with url_pathregex to an
> acl.
Ok.
You may also want to look into the rep_mime_type acl (in
http_reply_access) for a more firm filetype access control.
> As for the filename-extension-does-not-match- the-real-file-type-problem
> i thought about a external-helper performing checks based upon the UNIX
> "file" command resp. magic bytes. This could be problematic, since the
> file has to be retrieved first in order to check its filetype.
Not easily done with Squid unfortunately.
ICAP would be the way to go for a thing like this.
Yes, performance matters, especially bandwidth performance..
Regards
Henrik
Received on Mon Mar 22 2004 - 17:54:50 MST
This archive was generated by hypermail pre-2.1.9 : Thu Apr 01 2004 - 12:00:02 MST