Re: [squid-users] Whitelisting youtube

2018-12-29 Thread Eliezer Croitoru 
Sorry Marcus I totally forgot about this.

I was not talking about this issue but something about the init and other 
scripts that are being installed.

I will test it in the next weeks and will have a better overview and send it to 
you privately.

 

Thank,

Eliezer

 



 <http://ngtech.co.il/lmgtfy/> Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: elie...@ngtech.co.il



 

From: Marcus Kool [mailto:marcus.k...@urlfilterdb.com] 
Sent: Saturday, December 29, 2018 22:51
To: elie...@ngtech.co.il; squid-users@lists.squid-cache.org
Subject: Re: [squid-users] Whitelisting youtube

 

Hi Eliezer,

If you mean compiler errors on debian 9 which has OpenSSL 1.1 ...  

We will release ufdbGuard 1.34 soon which supports OpenSSL 1.1 since OpenSSL 
1.1 is not compatible with OpenSSL 1.0.

Marcus

 

On 29/12/2018 15:22, elie...@ngtech.co.il <mailto:elie...@ngtech.co.il>  wrote:

Markus,

 

Does ufdbGuard have a Debian package or build instructions?
The last time I tried to compile it on both Debian and Ubuntu I have 
encountered couple issues.

 

Thanks,

Eliezer

 

 



 <http://ngtech.co.il/main-en/> Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email:  <mailto:elie...@ngtech.co.il> elie...@ngtech.co.il



 

From: squid-users  <mailto:squid-users-boun...@lists.squid-cache.org> 
 On Behalf Of Marcus Kool
Sent: Friday, December 28, 2018 12:14
To: squid-users@lists.squid-cache.org 
<mailto:squid-users@lists.squid-cache.org> 
Subject: Re: [squid-users] Whitelisting youtube

 

Wolfgang, why don't you stop using squidguard which has no support for 5+ years 
and switch to ufdbGuard?

ufdbGuard is regularly maintained and has a Reference Manual that explains what 
and how to whitelist domains.

Marcus

 

On 28/12/2018 07:18, Wolfgang Paul Rauchholz wrote:

Problem staqtement: can't whitelist youtube.com <http://youtube.com> 

 

I run squid 3.5 and squiguard on a CENTOS 7 home linux server.

The blacklist database is created by a publicly available script called 
getlists.sh. This script downloads and compiles blacklists  from several sites 
(e.g. squidguard website)

To whitelist youtube which is blocked too,  I created the directory 'white' 
within 'blacklist'. The squidguard config looks like this:

 

dest white {

domainlist  white/domains

urllist white/urls

}

 

acl {

default {

passwhite !adv !porn !warez all

redirect http://localhost/block.html

}

}

 

the domaon file withi nwhite has these entries:

.2mdn.net:443 <http://2mdn.net:443> 

.accounts.google.com <http://accounts.google.com> 

.accounts.youtube.com <http://accounts.youtube.com> 

.dnld.googlevideo.com <http://dnld.googlevideo.com> 

.gmail.com:443-

.googleads4.g.doubleclick.net <http://googleads4.g.doubleclick.net> 

.googlevideo.com <http://googlevideo.com> 

.i.ytimg.com <http://i.ytimg.com> 

.nek.googlevideo.com <http://nek.googlevideo.com> 

.play.google.com <http://play.google.com> 

.sb.scorecardresearch.com <http://sb.scorecardresearch.com> 

.s.ytimg.com <http://s.ytimg.com> 

.youtube.com <http://youtube.com> 

.ytimg.com <http://ytimg.com> 

 

The entry I find in access.lof file reads like this:

1545988674.026  0 10.5.2.96 TAG_NONE/503 0 CONNECT www.youtube.com:443 
<http://www.youtube.com:443>  - HIER_NONE/- -

 

 

I still cannot unblock youtube.

I'd appreciate your help in resolving this.

 

Wolfgang

 

 

 






___
squid-users mailing list
squid-users@lists.squid-cache.org <mailto:squid-users@lists.squid-cache.org> 
http://lists.squid-cache.org/listinfo/squid-users

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Whitelisting youtube

2018-12-29 Thread Marcus Kool 

Hi Eliezer,

If you mean compiler errors on debian 9 which has OpenSSL 1.1 ...

We will release ufdbGuard 1.34 soon which supports OpenSSL 1.1 since OpenSSL 
1.1 is not compatible with OpenSSL 1.0.

Marcus


On 29/12/2018 15:22, elie...@ngtech.co.il wrote:


Markus,

Does ufdbGuard have a Debian package or build instructions?
The last time I tried to compile it on both Debian and Ubuntu I have 
encountered couple issues.

Thanks,

Eliezer



Eliezer Croitoru <http://ngtech.co.il/main-en/>
Linux System Administrator
Mobile: +972-5-28704261
Email: elie...@ngtech.co.il <mailto:elie...@ngtech.co.il>

cid:image001.png@01D2675E.DCF360D0

*From:* squid-users  *On Behalf Of 
*Marcus Kool
*Sent:* Friday, December 28, 2018 12:14
*To:* squid-users@lists.squid-cache.org
*Subject:* Re: [squid-users] Whitelisting youtube

Wolfgang, why don't you stop using squidguard which has no support for 5+ years 
and switch to ufdbGuard?

ufdbGuard is regularly maintained and has a Reference Manual that explains what 
and how to whitelist domains.

Marcus

On 28/12/2018 07:18, Wolfgang Paul Rauchholz wrote:

Problem staqtement: can't whitelist youtube.com <http://youtube.com>

I run squid 3.5 and squiguard on a CENTOS 7 home linux server.

The blacklist database is created by a publicly available script called 
getlists.sh. This script downloads and compiles blacklists  from several sites 
(e.g. squidguard website)

To whitelist youtube which is blocked too,  I created the directory 'white' 
within 'blacklist'. The squidguard config looks like this:

dest white {

      domainlist      white/domains

      urllist         white/urls

}

acl {

      default {

              pass    white !adv !porn !warez all

              redirect http://localhost/block.html

              }

}

the domaon file withi nwhite has these entries:

.2mdn.net:443 <http://2mdn.net:443>

.accounts.google.com <http://accounts.google.com>

.accounts.youtube.com <http://accounts.youtube.com>

.dnld.googlevideo.com <http://dnld.googlevideo.com>

.gmail.com:443-

.googleads4.g.doubleclick.net <http://googleads4.g.doubleclick.net>

.googlevideo.com <http://googlevideo.com>

.i.ytimg.com <http://i.ytimg.com>

.nek.googlevideo.com <http://nek.googlevideo.com>

.play.google.com <http://play.google.com>

.sb.scorecardresearch.com <http://sb.scorecardresearch.com>

.s.ytimg.com <http://s.ytimg.com>

.youtube.com <http://youtube.com>

.ytimg.com <http://ytimg.com>

The entry I find in access.lof file reads like this:

1545988674.026     0 10.5.2.96 TAG_NONE/503 0 CONNECT www.youtube.com:443 
<http://www.youtube.com:443> - HIER_NONE/- -

I still cannot unblock youtube.

I'd appreciate your help in resolving this.

Wolfgang



___

squid-users mailing list

squid-users@lists.squid-cache.org  
<mailto:squid-users@lists.squid-cache.org>

http://lists.squid-cache.org/listinfo/squid-users

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Whitelisting youtube

2018-12-29 Thread eliezer 
Markus,

 

Does ufdbGuard have a Debian package or build instructions?
The last time I tried to compile it on both Debian and Ubuntu I have 
encountered couple issues.

 

Thanks,

Eliezer

 

 



 <http://ngtech.co.il/main-en/> Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email:  <mailto:elie...@ngtech.co.il> elie...@ngtech.co.il



 

From: squid-users  On Behalf Of 
Marcus Kool
Sent: Friday, December 28, 2018 12:14
To: squid-users@lists.squid-cache.org
Subject: Re: [squid-users] Whitelisting youtube

 

Wolfgang, why don't you stop using squidguard which has no support for 5+ years 
and switch to ufdbGuard?

ufdbGuard is regularly maintained and has a Reference Manual that explains what 
and how to whitelist domains.

Marcus

 

On 28/12/2018 07:18, Wolfgang Paul Rauchholz wrote:

Problem staqtement: can't whitelist youtube.com <http://youtube.com> 

 

I run squid 3.5 and squiguard on a CENTOS 7 home linux server.

The blacklist database is created by a publicly available script called 
getlists.sh. This script downloads and compiles blacklists  from several sites 
(e.g. squidguard website)

To whitelist youtube which is blocked too,  I created the directory 'white' 
within 'blacklist'. The squidguard config looks like this:

 

dest white {

domainlist  white/domains

urllist white/urls

}

 

acl {

default {

passwhite !adv !porn !warez all

redirect http://localhost/block.html

}

}

 

the domaon file withi nwhite has these entries:

.2mdn.net:443 <http://2mdn.net:443> 

.accounts.google.com <http://accounts.google.com> 

.accounts.youtube.com <http://accounts.youtube.com> 

.dnld.googlevideo.com <http://dnld.googlevideo.com> 

.gmail.com:443-

.googleads4.g.doubleclick.net <http://googleads4.g.doubleclick.net> 

.googlevideo.com <http://googlevideo.com> 

.i.ytimg.com <http://i.ytimg.com> 

.nek.googlevideo.com <http://nek.googlevideo.com> 

.play.google.com <http://play.google.com> 

.sb.scorecardresearch.com <http://sb.scorecardresearch.com> 

.s.ytimg.com <http://s.ytimg.com> 

.youtube.com <http://youtube.com> 

.ytimg.com <http://ytimg.com> 

 

The entry I find in access.lof file reads like this:

1545988674.026  0 10.5.2.96 TAG_NONE/503 0 CONNECT www.youtube.com:443 
<http://www.youtube.com:443>  - HIER_NONE/- -

 

 

I still cannot unblock youtube.

I'd appreciate your help in resolving this.

 

Wolfgang

 

 

 





___
squid-users mailing list
squid-users@lists.squid-cache.org <mailto:squid-users@lists.squid-cache.org> 
http://lists.squid-cache.org/listinfo/squid-users

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Whitelisting youtube

2018-12-29 Thread Amos Jeffries 
On 28/12/18 10:18 pm, Wolfgang Paul Rauchholz wrote:
> Problem staqtement: can't whitelist youtube.com
> 
...
> The entry I find in access.lof file reads like this:
> 1545988674.026      0 10.5.2.96 TAG_NONE/503 0 CONNECT
> www.youtube.com:443 - HIER_NONE/- -
> 

You cannot redirect a CONNECT tunnel with SquidGuard. You should prevent
this methods being sent to the redirector entirely, like so:

 url_rewrite_access deny CONNECT


Also, this is a 503 (unable to connect) error, not a denial. So
whitelisting is pointless.

Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Whitelisting youtube

2018-12-28 Thread Marcus Kool 

Wolfgang, why don't you stop using squidguard which has no support for 5+ years 
and switch to ufdbGuard?

ufdbGuard is regularly maintained and has a Reference Manual that explains what 
and how to whitelist domains.

Marcus


On 28/12/2018 07:18, Wolfgang Paul Rauchholz wrote:

Problem staqtement: can't whitelist youtube.com 

I run squid 3.5 and squiguard on a CENTOS 7 home linux server.
The blacklist database is created by a publicly available script called 
getlists.sh. This script downloads and compiles blacklists  from several sites 
(e.g. squidguard website)
To whitelist youtube which is blocked too,  I created the directory 'white' 
within 'blacklist'. The squidguard config looks like this:

dest white {
        domainlist      white/domains
        urllist         white/urls
}

acl {
        default {
                pass    white !adv !porn !warez all
                redirect http://localhost/block.html
                }
}

the domaon file withi nwhite has these entries:
.2mdn.net:443 
.accounts.google.com 
.accounts.youtube.com 
.dnld.googlevideo.com 
.gmail.com:443-
.googleads4.g.doubleclick.net 
.googlevideo.com 
.i.ytimg.com 
.nek.googlevideo.com 
.play.google.com 
.sb.scorecardresearch.com 
.s.ytimg.com 
.youtube.com 
.ytimg.com 

The entry I find in access.lof file reads like this:
1545988674.026      0 10.5.2.96 TAG_NONE/503 0 CONNECT www.youtube.com:443 
 - HIER_NONE/- -


I still cannot unblock youtube.
I'd appreciate your help in resolving this.

Wolfgang




___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users