Ehlo,

se da un squid (2.6-stable1) pe post de transparent proxy.
Pe acest squid se incearca blocarea requesturilor catre *.yahoo.com cu o
regula de genul

acl y dstdomain .yahoo.com
http_access deny y
http_reply_access deny y

Folosind orice browser, aceasta regula isi face treaba.

Insa cu YMessenger da rateuri. In cache.log imi apare ca:
- cererea initiala este DENIED, insa
- reply-ul este ALLOWED, facand match pe regula y


2006/12/07 10:21:57| aclMatchAclList: checking all
2006/12/07 10:21:57| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
2006/12/07 10:21:57| aclMatchIp: 'IP' found
2006/12/07 10:21:57| aclMatchAclList: returning 1
2006/12/07 10:21:57| aclCheck: checking 'http_access deny y'
2006/12/07 10:21:57| aclMatchAclList: checking y
2006/12/07 10:21:57| aclMatchAcl: checking 'acl y dstdomain .yahoo.com'
2006/12/07 10:21:57| aclMatchDomainList: checking 'messenger.yahoo.com'
2006/12/07 10:21:57| aclMatchDomainList: 'messenger.yahoo.com' found
2006/12/07 10:21:57| aclMatchAclList: returning 1
2006/12/07 10:21:57| aclCheck: match found, returning 0
2006/12/07 10:21:57| aclCheckCallback: answer=0
2006/12/07 10:21:57| The request GET
http://messenger.yahoo.com/external/client_ad.php?p=id is DENIED,
because it matched 'y'
2006/12/07 10:21:57| The reply for GET
http://messenger.yahoo.com/external/client_ad.php?p=id is ALLOWED,
because it matched 'y'



_______________________________________________
RLUG mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/rlug

Raspunde prin e-mail lui