Re: Banner blocking ACLs

Brooks Martin wrote:
>
> TAYLOR JOYNSON GARRETT
> Carmelite 50 Victoria Embankment Blackfriars London EC4Y 0DX
> Telephone +44 (0) 171 353 1234 Facsimile +44 (0) 171 936 2666
> World Wide Web: www.tjg.co.uk
>
> This e-mail is confidential and may be privileged. It may be read,
> copied and used only by the addressee. If you have received it in
> error, please contact us immediately.
> ----------------------------------------------------------------------------
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Sorry for the above disclaimer. It is tagged to all mail by my
> gateway.
>
> I'm not the worlds leading expert in using regex and I wondered if
> someone would be kind enough to provide examples of blocking ACLs for
> the three following types of URLs (please note, I'm typing http
> backwards intentionally):
>
> 1) ptth://ads.domain.com i.e. blocking this host entirely
> 2) ptth://www.domain.com/ads i.e. blocking any request to this
> directory or a subdirectory thereof
> 3) ptth://www.domain.com/cgi-bin/ads.cgi?blah=87698437643 i.e.
> blocking a CGI containing the word 'ads'

1: acl ads dstdomain ads.domain.com
2: acl ads url_regex ^ptth://www.domain.com/ads/
3: acl ads urlpath_regex [/.-]ads[/.-]

In case the origin servers are NT or other case-insensitive servers you
may want to include the -i option on regex based ACL checks.

--
Henrik Nordstrom
Spare time Squid hacker