Re: [SQU] Interesting Question

This sounds very cool. I have a few questions about it though. So, does your
implementation have any problems with outside content? You know, like media
referenced from illegal domains but appearing in legal domains?

Thanks,
Devin Teske

>Ok, I believe I have a solution for you....
>
>We have a similar situation here at our school,
>although we do not use databases....
>
>To give a brief description, one of your proxy servers
>is dedicated to the lower school, and we have setup
>squid so that the users can only go to webpages that
>are listed in an ACL "gooddomains" but if they try to
>go to another website, they are disallowed....ok??
>
>I was given the task by our IT technician of finding a
>way so that teachers could add a webpage link (URL)
>into the ACL "gooddomains" so that the lowerschool
>could access that site. (This was done by our IT
>technician writing an ASP script for this) So, I wrote
>a bash script that "loops4mail" and if it contains an
>expression such as:
>
>add gooddomains
>@@@@www.yahoo.com
>
>that URL would be appended to the bottom of the ACL
>"gooddomains" squid would reconfigure itself and the
>site named above would then be allowed to be viewed.
>
>Similarly, if you wanted that URL removing so that it
>could no longer be accessed you would put:
>
>remove gooddomains
>%%%%www.yahoo.com
>
>The reason why @@@@ and %%%% are used for add and
>remove respectfully is because I realised that I was
>picking up www which was in the hostname, so I had to
>come up with a prefix, otherwise I was finding that
>the hostname of the proxy server was being added as an
>ACL, and obviously the computer could not resolve to
>it!!
>
>If you would like a copy of my bash script "loop4mail"
>let me know and I would be only too happy.
>
>Ok, so in squid.conf, you will need to do the
>following (I think,....this is only off the top of my
>head!!)
>
>acl_src "/var/squid/gooddomains"
>
>and then:
>
>http_access allow all
>http_access deny gooddomains
>
>(You might need to ask someone about this... I have
>forgotten!!)
>
>Furthermore, if you have not already done so, you will
>have to make sure that sendmail is configured
>correctlyto get this script to work (thats if you
>decide to use it :))
>
>I believe that solves your problem...???
>
>Thomas Adam
>
>
>--- Henrik Nordstrom <hno@hem.passagen.se> wrote: > So
>go back to think about what the problem really
> > is. Almost everything
> > can be solved in this world (networking, web,
> > proxies, ...), it is only
> > a question about finding the correct approach.
> >
> > --
> > Henrik Nordstrom
> > Squid hacker
> >
> >
> > Devin Teske wrote:
> > >
> > > I'm about to start cursing. I've come way to far
> > to stop now. There HAS to
> > > be a solution to this. You do know what the end
> > product is right? Teachers
> > > go online, somehow that add a link to a database.
> > Students go online,
> > > students can only go to those pages and nowhere
> > else. This is the final
> > > goal. I will never give up on this.
> > >
> > > Thanks,
> > > Devin Teske
> > >
> > > >Devin Teske wrote:
> > > > >
> > > > > I was studying proxy servers and the protocols
> > and something came to
> > > >mind.
> > > > > When the client requestsa page from the
> > server, it will request a
> > > >keep-alive
> > > > > connection. After all the contents of the page
> > have been loaded it will
> > > > > close the connection.
> > > >
> > > >Many pages can be server using one connection,
> > and all known browsers
> > > >utlizes more than one connection to download the
> > objects that makes up
> > > >one page...
> > > >
> > > >
> > > >--
> > > >Henrik Nordstrom
> > > >Squid hacker
> > >
> >
>_________________________________________________________________
> > > Get your FREE download of MSN Explorer at
> > http://explorer.msn.com
> >
> > --
> > To unsubscribe, see
> > http://www.squid-cache.org/mailing-lists.html
> >
>
>
>=====
>Thomas Adam
>Linux Co-ordinator for The Purbeck School
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html