you can always add exceptions for popular sites that connect by IP, as there
are not going to "that" many

-----Original Message-----
From: Polarizer <[EMAIL PROTECTED]>
To: full-disclosure@lists.grok.org.uk
Date: Mon, 14 Nov 2005 10:35:01 +0100
Subject: Re: [Full-disclosure] Blocking Skype

> 
>  > acl connect method CONNECT
> 
> This line is not necessary since standard squid.conf contains this line:
> 
> acl CONNECT method CONNECT
> 
> so simply use the uppercase version (squid does not check upper and 
> lower case in acl names)
> 
>  > # Apply your acls
>  > http access deny connect numerics_IPs all
> 
> Respect :O) Two typos in just one line. With CONNECT mentioned above:
> 
> http_access deny CONNECT numeric_IPs all
> 
> instead of
> 
> http access deny connect numerics_IPs all
> 
> BTW: I'm sure, it will break a lot of other things but skype, too.
> 
> polarizers 2cent
> http://www.codixx.de/polarizer.html
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Reply via email to