Re: [squid-users] Allowing/Unblocking Skype with Squid

From: Kinkie <kinkie-squid@dont-contact.us>
Date: Tue, 06 Jun 2006 16:02:49 +0200

On Tue, 2006-06-06 at 15:13 +0200, Philipp Nyffenegger wrote:
> >
> > acl N_IPS urlpath_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
> > acl connect method CONNECT
> >
> > http_access allow connect N_IPS all
>
> Why do all these tipps refer to "urlpath_regex" ? This is IMHO false.
> At least it does not match at my site. There is no URL-Path in the
> CONNECT-Method, iirc.
>
> This works fine in blocking Skype via Squid at my site :
>
> acl CONNECT method CONNECT
> acl skype url_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
> .
> deny_info ERR_CLIENT_HTTPS2IP_DENIED skype
> http_access deny CONNECT skype

I might have read the ACL wrong, but aren't you blocking all HTTPS
access when the server address is specified as an IP this way?

        Kinkie
Received on Tue Jun 06 2006 - 08:02:59 MDT

This archive was generated by hypermail pre-2.1.9 : Sat Jul 01 2006 - 12:00:01 MDT