Hi All,
I have the following in my squid.conf:
acl worms url_regex "/usr/local/squid/etc/worm-regex"
http_access deny worms
...and in /usr/local/squid/etc/worm-regex:
.*readme.eml*
If I try to access a "dummy" readme.eml file I placed in my own web server,
I get the "denied" page from squid as expected.
If I access an infected website, the virus is able to drop an infected .htm
file into my web cache.
Squid's log shows only a TCP_DENIED entry, never a success.
Any Ideas?
-John
john@hytronix.com
Received on Fri Sep 28 2001 - 07:13:47 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:02:31 MST