Hi All
Can any one help on the below issue.
I tried changing the order of deny and allow acl but it did not yield any
result.
RegardsArjun K
On Sunday, 3 May, 2020, 05:21:02 pm IST, Arjun K <email_ar...@yahoo.com>
wrote:
Hi All
The below is the configuration defined in the proxy server.The issue is that
the proxy is not blocking the websites mentioned in a file named denylist.txt.
Kindly let me know what needs to be changed to block the websites.
####IP Ranges allowed to use proxyacl localnet src 10.196.0.0/16
acl localnet src 10.197.0.0/16acl localnet src 10.198.0.0/16acl localnet src
10.199.0.0/16acl localnet src 10.200.0.0/16
####Allowed and Denied URLsacl allowedurl dstdomain
/etc/squid/allowed_url.txtacl denylist dstdomain /etc/squid/denylist.txt
acl windowsupdate dstdomain windowsupdate.microsoft.comacl windowsupdate
dstdomain .update.microsoft.comacl windowsupdate dstdomain
download.windowsupdate.comacl windowsupdate dstdomain
redir.metaservices.microsoft.comacl windowsupdate dstdomain
images.metaservices.microsoft.comacl windowsupdate dstdomain c.microsoft.comacl
windowsupdate dstdomain www.download.windowsupdate.comacl windowsupdate
dstdomain wustat.windows.comacl windowsupdate dstdomain crl.microsoft.comacl
windowsupdate dstdomain sls.microsoft.comacl windowsupdate dstdomain
productactivation.one.microsoft.comacl windowsupdate dstdomain
ntservicepack.microsoft.comacl windowsupdate dstdomain
eu.vortex-win.data.microsoft.comacl windowsupdate dstdomain
eu-v20.events.data.microsoft.comacl windowsupdate dstdomain
usseu1northprod.blob.core.windows.netacl windowsupdate dstdomain
usseu1westprod.blob.core.windows.netacl windowsupdate dstdomain
winatp-gw-neu.microsoft.comacl windowsupdate dstdomain
winatp-gw-weu.microsoft.comacl windowsupdate dstdomain
wseu1northprod.blob.core.windows.netacl windowsupdate dstdomain
wseu1westprod.blob.core.windows.netacl windowsupdate dstdomain
automatedirstrprdweu.blob.core.windows.netacl windowsupdate dstdomain
automatedirstrprdneu.blob.core.windows.netacl windowsupdate dstdomain
play.google.comacl windowsupdate dstdomain go.microsoft.com
acl CONNECT method CONNECTacl wuCONNECT dstdomain www.update.microsoft.comacl
wuCONNECT dstdomain sls.microsoft.comhttp_access allow CONNECT wuCONNECT
localnethttp_access allow windowsupdate localnet
acl Safe_ports port 80 # httpacl Safe_ports port 443 # httpsacl CONNECT method
CONNECT
http_access allow allowedurlhttp_access deny denylisthttp_access allow
localhost managerhttp_access allow localhosthttp_access allow
localnethttp_access deny managerhttp_access deny !Safe_portshttp_access deny all
http_port 8080
cache_dir ufs /var/spool/squid 10000 16 256coredump_dir /var/spool/squid
refresh_pattern ^ftp: 1440 20% 10080refresh_pattern ^gopher:
1440 0% 1440refresh_pattern -i (/cgi-bin/|\?) 0 0%
0refresh_pattern . 0 20% 4320refresh_pattern -i
windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200
reload-into-imsrefresh_pattern -i
microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200
reload-into-imsrefresh_pattern -i
windows.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200
reload-into-ims
RegardsArjun K. _______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
