Squid-2.5 features (ctd)

New ACL types

referer_regex
Match on Referer
Referer is highly unreliable by nature
src_as
Route request based on source AS
AS tables built from a WHOIS database at present
max_user_ip
limit the number of IP addresses a single user
can authenticate from
req_mime_type
Match against the MIME type of a request
rep_mime_type
Match against the MIME type of the reply
Only useful in data stream rules (eg http_reply_access)
acl fileupload req_mime_type -i ^multipart/form-data$
acl javascript rep_mime_type -i ^application/x-javascript$