On Mon, 22 Mar 2004, Frank Fegert wrote: > Hi all, > > i'm looking for a way to block certain file downloads within squid. I > currently apply a list of filename extensions with url_pathregex to an > acl.
Ok. You may also want to look into the rep_mime_type acl (in http_reply_access) for a more firm filetype access control. > As for the filename-extension-does-not-match- the-real-file-type-problem > i thought about a external-helper performing checks based upon the UNIX > "file" command resp. magic bytes. This could be problematic, since the > file has to be retrieved first in order to check its filetype. Not easily done with Squid unfortunately. ICAP would be the way to go for a thing like this. Yes, performance matters, especially bandwidth performance.. Regards Henrik
