RE: [squid-users] Restrict Messengers

From: Sadananda B Rai <srai@dont-contact.us>
Date: Thu, 26 Sep 2002 16:17:31 +0530

   Thanks a lot for all of u for the immediate advices. It's working for me.
One more problem I have got is, It's restricted everyone in the network. I
want something like it should deny only for restricted ip's. My squid.conf
is as fallow....

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl our_net src 192.168.1.0/24
acl full_allow src 192.168.1.2 192.168.1.16 192.168.1.15 192.168.1.50
192.168.1.51 192.168.1.54 192.168.1
.56 192.168.1.58 192.168.1.62 192.168.1.64 192.168.1.70 192.168.1.68
192.168.1.3

acl allowed_domains dstdom_regex "/etc/squid/allowed"
acl denied_domains url_regex "/etc/squid/denied"
http_access deny denied_domains
http_access allow full_allow
http_access allow apollo
http_access deny !allowed_domains
http_access allow our_net
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
icp_access allow all
---------------------Is it possible to allow messengers to the ip's I
mentioned in acl full_allow src.
Thanks again
Sada

-----Original Message-----
From: John Szkudlapski [mailto:johns@bsfc.ac.uk]
Sent: Thursday, September 26, 2002 3:33 PM
To: Sadananda B Rai
Cc: squid-users@squid-cache.org
Subject: RE: [squid-users] Restrict Messengers

Hi

what you could do is to create a file on your machine (i.e linux)
/etc/squid/banlist/messengers.dat (like the one I have attached from my
server)

then in squid

acl messengers url_regex -i "/etc/squid/banlist/messengers.dat"
http access_deny messengers

otherwise, this is a list of IP's that was supplied by a collegue at another
UK college (cheers Jezz), which I have not added to.. the attached one is
totally upto date

>The IP's for all of the IM's
>
>AOL Instant Messengers:
>AOLim_1 = 152.163.214.75
>AOLim_2 = 152.163.214.76
>AOLim_3 = 152.163.214.108
>AOLim_4 = 152.163.214.109
>AOLim_5 = 205.188.1.56
>AOLim_6 = 205.188.4.106
>AOLim_7 = 205.188.147.114
>AOLim_8 = 152.163.241.121
>AOLim_9 = 152.163.241.129
>AOLim_10 = 152.163.242.28
>AOLim_11 = 152.163.242.24
>AOLim_12 = 152.163.241.120
>AOLim_13 = 152.163.241.128
>AOLim_14 = 152.163.241.96
>
>ICQ Instant Messengers:
>ICQ_1 = 205.188.153.0
>ICQ_2 = 216.122.100.172
>
>MSN Instant Messengers:
>MSNim_1 = 207.46.183.253
>
>Yahoo Instant Messengers:
>Yahoo_1 = 24.71.200.68
>Yahoo_2 = 204.71.202,73
>Yahoo_3 = 204.71.200.54
>Yahoo_4 = 204.71.200.55
>Yahoo_5 = 204.71.200.56
>Yahoo_6 = 204.71.200.57
>Yahoo_7 = 204.71.177.35
>Yahoo_8 = 204.71.202.59
>Yahoo_9 = 204.71.202.58
>Yahoo_10 = 216.115.105.214
>Yahoo_11 = 204.71.201.47
>Yahoo_12 = 204.71.201.48
>Yahoo_13 = 216.115.105.215
>Yahoo_14 = 216.136.172.221
>Yahoo_15 = 216.115.107.63 es21.msg.yahoo.com
>Yahoo_16 = 216.115.107.64 es22.msg.yahoo.com
>Yahoo_17 = 216.115.107.65 es23.msg.yahoo.com
>Yahoo_18 = 216.115.107.66 es24.msg.yahoo.com
>Yahoo_19 = 216.115.107.67 es25.msg.yahoo.com
>Yahoo_20 = 216.115.107.101 es26.msg.yahoo.com
>Yahoo_21 = 216.115.107.102 es27.msg.yahoo.com
>Yahoo_22 = 216.115.107.103 es28.msg.yahoo.com
>Yahoo_23 = 216.115.107.104 es29.msg.yahoo.com
>Yahoo_24 = 216.115.107.105 es30.msg.yahoo.com
>Yahoo_25 = 216.136.173.179 es31.msg.yahoo.com

------------------------------------
John Paul Szkudlapski (Web Manager)
Computer Services - BSFC
t: +44 151 651 3720
f: +44 151 653 4419
m: +44 780 154 2033
w: http://hermes.bsfc.ac.uk

****************************************************************
Birkenhead Sixth Form College

This message is sent in confidence for the addressee only;
If it has come to you in error please notify compserv@bsfc.ac.uk

The contents of this e-mail are the personal views of the sender,
which may not necessarily reflect those of the college.

This message has been scanned for viruses.
The college cannot accept any responsibility for any viruses
which may have come from external sources.

****************************************************************
Received on Thu Sep 26 2002 - 04:48:15 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:10:25 MST