I didn't test this, but i think it works better: *http_access deny banned_sites !good_facebook* is it works?
2016-01-18 16:35 GMT-02:00 Lucía Guevgeozian <lulumai...@gmail.com>: > Ok, thanks again for the quick reply, I'm upgrading :) > > Regards, > Lucia > > 2016-01-18 14:58 GMT-03:00 Yuri Voinov <yvoi...@gmail.com>: > >> >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA256 >> >> >> >> 18.01.16 23:56, Lucía Guevgeozian пишет: >> > Thank you very much for your responses. >> > >> > I understand from http://www.squid-cache.org/Doc/config/http_access/ >> that >> > http_access will not work with https in version of squid older than 3.3. >> > >> > Do you know if an alternative config exists without upgrading? >> We don't know it. HTTPS-ops required updrade. >> >> > >> > >> > Regards, >> > Lucia >> > >> > 2016-01-18 14:38 GMT-03:00 Antony Stone >> <antony.st...@squid.open.source.it> <antony.st...@squid.open.source.it>: >> > >> >> On Monday 18 January 2016 at 18:31:40, Yuri Voinov wrote: >> >> >> >>> Facebook (like more others) uses Akamai CDN as background delivery >> >> service. >> >>> >> >>> So, facebook.* domain is a little part of whole big fat Facebook :) >> >> >> >> True, but that should still match *request* URLs (once the HTTP/S >> problem >> >> is >> >> sorted out), no? >> >> >> >>> 18.01.16 23:29, Antony Stone пишет: >> >>>> On Monday 18 January 2016 at 18:22:24, Lucía Guevgeozian wrote: >> >>>>> acl good_facebook urlpath_regex groups >> >>>>> acl banned_sites url_regex "/etc/squid/config/banned_sites" >> >>>>> >> >>>>> inside banned_sites I have the word facebook >> >>>>> >> >>>>> http_access allow good_facebook >> >>>>> http_access deny banned_sites >> >>>> >> >>>> Okay, so you've set up some HTTP access controls... so far, so good. >> >>>> >> >>>>> If I try accessing https://www.facebook.com/groups I get blocked >> >>>> >> >>>> That's an HTTPS URL, not HTTP :) >> >>>> >> >>>>> ps: I'm using this squid version >> >>>>> Squid Cache: Version 3.0.STABLE18 >> >>>> >> >>>> That's old - you are strongly recommended to upgrade. >> >>>> >> >>>> >> >>>> Antony. >> >> >> >> -- >> >> Perfection in design is achieved not when there is nothing left to >> add, but >> >> rather when there is nothing left to take away. >> >> >> >> - Antoine de Saint-Exupery >> >> >> >> Please reply to the >> >> list; >> >> please >> *don't* CC >> >> me. >> >> _______________________________________________ >> >> squid-users mailing list >> >> squid-users@lists.squid-cache.org >> >> http://lists.squid-cache.org/listinfo/squid-users >> >> >> > >> > >> > >> > _______________________________________________ >> > squid-users mailing list >> > squid-users@lists.squid-cache.org >> > http://lists.squid-cache.org/listinfo/squid-users >> >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v2 >> >> iQEcBAEBCAAGBQJWnSevAAoJENNXIZxhPexGG9EH/0Rmqad38Lf8vHArd7ZrYrIo >> Ie6viHuydYgsJOa+Ii/gqbsmIeiubPA8gY5mzJFzAo44k+Q0v8iUv8Qm2bQsD7v5 >> DhsEqenkfazw3Gv3PTQM27aUUk6ucDBJhtrCiGGrofLnMzaHoqVlSU0Vwkv2cNfr >> flXuTfzhJtqNrXbiyVw75v8lvesRxozpfBas3vOBimrBCn6UFqyFlkirQSvo+m3R >> IRN/FXOVpJqRXSAfZWRPQayfmDxf+cZbX2nhQvwvBatyu8+Z8s4sl7m6Lf/KU4U2 >> mZaRon9h7cJGmC/sVNre1JFI7tTACg2nnGjINtv+Itm7uE9r95CNr+OGxYkLUcM= >> =EES7 >> -----END PGP SIGNATURE----- >> >> >> _______________________________________________ >> squid-users mailing list >> squid-users@lists.squid-cache.org >> http://lists.squid-cache.org/listinfo/squid-users >> >> > > _______________________________________________ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users > > --
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
