Re: [squid-users] p2p and squid

From: Marcus Kool <marcus.kool@dont-contact.us>
Date: Thu, 07 Feb 2008 07:18:59 -0200

Gary,

ufdbGuard is free. You can can download it from
http://sourceforge.net/projects/ufdbguard
and you can use it with free URL databases.
You only need a database license if you use it with the
commercial URL database from URLfilterDB.

-Marcus

Gary wrote:
> On Jan 23, Marcus Kool wrote:
>
> > ufdbGuard can also block HTTPS sites which have no valid certificate
> > and sites which have no FQDN in the URL.
>
> Is this the only option? Does it require an account on urlfilterdb.com?
> Here's what I've tried but it doesn't appear to work perhaps due to
> misconfiguration?
>
> http_access allow localhost
> acl lan src 10.10.0.0/8
> # block skype supernode test
> acl numeric urlpath_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
> acl connect method CONNECT
> http_access deny connect numeric all
> http_access allow lan
> http_access deny all
>
> The docs on http://www.skype.com/security/universities suggest that
> HTTP and SOCKS5 proxied clients do not gain supernode status but
> tcpdump can't confirm or deny that's true. I've seen prior posts
> regarding Skype but I may have missed something re this particular
> issue. Does anyone have experience with this? I'd prefer not to
> block Skype traffic altogether but v2 Mac and Linux Skype clients
> do not have the option to turn off the supernode feature as the v3
> Win32 clients.
>
> -Gary
>
>
Received on Thu Feb 07 2008 - 02:20:27 MST

This archive was generated by hypermail pre-2.1.9 : Sat Mar 01 2008 - 12:00:04 MST