On Fri, 23 Sep 2011 09:32:01 +0100, Dayo Adewunmi wrote:
Hi
I've noticed that some sites which I deny access to with http_access deny
are blocked when accessed with http://example.com but accessible
through https://example.com. How do I ensure the https://example.com
is also blocked?
Depends on how you are blockign them and how yoru clients are using Squid.
If you are using interception to get the traffic into Squid, the only
way to block them is to firewall port 443. Ability to view HTTPS
internals is one of the things you loose when intercepting.
If the browsers are aware of the proxy and using CONNECT requests to
make https:// connections, then dstdomain will catch both http:// and
https:// forms.
Amos
My clients are using squid transparently. I've got this line in squid.conf
http_port 3128 transparent
And I'm blocking them like this:
I've got a file called denied.dat that contains lines of websites which
should be blocked, e.g.:
.facebook.com
.facebook.net
then back in squid.conf I have this:
acl academic01 time MTWHF 07:00-16:00
acl blocked dstdomain "/etc/squid/denied.dat"
http_access deny blocked academic01
Thanks
Dayo
