Re: [squid-users] Blocking HCP?

From: Henrik K <hege_at_hege.li>
Date: Sat, 12 Jun 2010 10:07:51 +0300

On Fri, Jun 11, 2010 at 11:47:38AM -0700, Kurt Buff wrote:
> 2010/6/11 Henrik Nordström <henrik_at_henriknordstrom.net>:
> > fre 2010-06-11 klockan 11:02 -0700 skrev Kurt Buff:
> >> All,
> >>
> >> I've been biggling around teh interwebs, and crusing through the faqs
> >> and manuals, and don't see how to block this protocol.
> >
> > Not much Squid can do about this. It's a local exploit on the Windows
> > workstation when the browser, email program or whatever that processes
> > URLs in any context sees specially crafted hcp:// URLs.
> >
> > Regards
> > Henrik
>
> I was hoping that squid could detect the urls in web pages and either
> block the entire page or elide that url.

That's the job of DansGuardian, Privoxy, ClamAV or any other tool including
ICAP ones that is able to process and block body contents.

As I understood, once you click the hcp:// it's already too late. It doesn't
matter if you deny the request in Squid.
Received on Sat Jun 12 2010 - 07:07:55 MDT

This archive was generated by hypermail 2.2.0 : Sat Jun 12 2010 - 12:00:02 MDT