Tuesday, September 11, 2012

Blocking videos with rep_mime_type video/x-flv

1 comments







We are going to block this file.The configuration file is :

acl LOCALNETWORK src 192.168.0.0/24
acl FORBIDDEN_DESTINATION dstdomain "/etc/squid/restrictdomains.txt"
acl FORBIDDEN_VIDEO rep_mime_type video/x-flv 

http_access deny FORBIDDEN_DESTINATION
http_reply_access deny FORBIDDEN_VIDEO


http_access allow LOCALNETWORK
http_port 3128



The difference with our previous configuration are :
  1. acl FORBIDDEN_VIDEO rep_mime_type video/x-flv. rep_mime_type is regex match against the mime type of the reply received by squid. Can be used to detect file download or some types HTTP tunneling requests. This has no effect in http_access rules. It only has effect in rules that affect the reply data stream such as http_reply_access.
  2. http_reply_access deny FORBIDDEN_VIDEO. http_reply_access allow replies to client requests. This is complementary to http_access.
Read more...

Friday, September 7, 2012

Set squid proxy server upload limit

0 comments



 
 
 
 
 
 
 
 
Set squid proxy server upload limit ?


Add the following line in the squid.conf file


request_body_max_size 200 KB

This will set the upload limit to 200 kb



Read more...

Block skype on squid proxy server

3 comments












acl numeric_IPs url_regex -i ^([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)
acl Skype_UA browser ^skype^
acl Skype_Allowed_Users proxy_auth user1 user2


http_access deny numeric_IPS !Skype_Allowed_Users
http_access deny Skype_UA !Skype_Allowed_Users


http_access allow ntlm_users
http_access deny all
Read more...