[squid-users] ACLs to direct request to proper parent?

I've recently installed a Squid 2.6STABLE16 system in a country that
requires all web browsing to go through a government-specified proxy
server. The Government runs a non-transparent proxy setup that must be
explicitly listed in the Squid configuration.

That would normally be easy, as all I'd do is list the Governement proxy
as a parent. However, I have three types of traffic I'd like to direct
to different places:

        1. Traffic that should be virus-scanned before delivering to
the client.
        2. Traffic that should not be virus-scanned such as web
conferencing.
        3. Traffic that is internal and should not be virus scanned or
given to the Government proxy.

Here's what I have so far:

  cache_peer 127.0.0.1 parent 8080 7 name=vscan no-query no-digest
default
  cache_peer govproxy parent 3128 7 no-query no-digest

  cache_peer_domain vscan !.pressaccess.com !.presentonline.com
  cache_peer_domain vscan !.interactconferencing.com !.raindance.com
  cache_peer_domain vscan !.mshow.com !.placeware.com
  cache_peer_domain vscan !.ilearning.com !.kindercam.com
!.fidelity.com
  cache_peer_domain vscan !.lexisnexis.com !data.finlistics-vm.com
  cache_peer_domain vscan !library.midicorp.com
  cache_peer_domain vscan !.finance.yahoo.com !.tenrox.com
!.riskadvisory.com

  acl internal-dst dst 10.0.0.0/255.0.0.0
  acl internal-dst dst 172.16.0.0/255.240.0.0
  acl internal-dst dst 192.168.0.0/255.255.0.0
  always_direct allow internal-dst

I'd like to bypass the virus scanner for more things than just domain
lists. I'd like to be able to use an ACL like:
  acl novirus-url urlpath_regex -i \.gif(\?.*)?$ \.jpg(\?.*)?$
\.png(\?.*)?$
  acl novirus-url urlpath_regex -i \.mpe?g(\?.*)?$ \.avi(\?.*)?$
\.swf(\?.*)?$
  acl novirus-url urlpath_regex -i \.qt(\?.*)?$ \.mov(\?.*)?$
\.as[fx](\?.*)?$
  acl novirus-url urlpath_regex -i \.rm(\?.*)?$ \.wm[av](\?.*)?$
\.mp3(\?.*)?$
  acl novirus-url urlpath_regex -i \.m4[avp](\?.*)?$ \.mp4v?(\?.*)?$
  acl novirus-url urlpath_regex -i \.wav(\?.*)?$
And then use that ACL to bypass the virus scanner and go directly to the
Government proxy. I didn't see anything in Squid 2.6STABLE16 that would
do what I need. Am I missing something?

Mike Mitchell
SAS Institute Inc.
Mike.Mitchell@sas.com
(919) 531-6793
Received on Mon Oct 22 2007 - 14:55:07 MDT