Re: [squid-users] Blacklist Service for Squid Proxy - Squidblacklist.org

2013-03-19 Thread Squidblacklist
Sir, if I do as you suggest and insert a -i

refresh_pattern ^ftp:   144020% 10080
refresh_pattern ^gopher:14400%  1440
refresh_pattern (/cgi-bin/|\?)  0   0%  0
refresh_pattern .   0   20% 4320
  

the blacklist acls' only work half the time with the -i inserted, do you
have any suggestions for a solution? In the meantime I am leaving -i
out of the directive to retain functionality of the blacklists



Re: [squid-users] Blacklist Service for Squid Proxy - Squidblacklist.org

2013-03-19 Thread Amos Jeffries

On 19/03/2013 8:07 p.m., Squidblacklist wrote:

Sir, if I do as you suggest and insert a -i

refresh_pattern ^ftp:   144020% 10080
refresh_pattern ^gopher:14400%  1440
refresh_pattern (/cgi-bin/|\?)  0   0%  0
refresh_pattern .   0   20% 4320
   


the blacklist acls' only work half the time with the -i inserted, do you
have any suggestions for a solution? In the meantime I am leaving -i
out of the directive to retain functionality of the blacklists


Very strange. All it does is make the regex pattern match 
case-insensitive. Nothing related to ACLs.


I am talking about:
  refresh_pattern -i (/cgi-bin/|\?) 0 0% 0

as per: http://www.squid-cache.org/Doc/config/refresh_pattern/

Amos


Re: [squid-users] Blacklist Service for Squid Proxy - Squidblacklist.org

2013-03-19 Thread Squidblacklist
Scratch that, nothing wrong with -i in the directive, It appears my
test environment has developed a routing issue directing packets to the
squid proxy, I apologize for the wasted messages



Signed,

Fix Nichols

http://squidblacklist.org


On Tue, 19 Mar 2013 20:22:15 +1300
Amos Jeffries squ...@treenet.co.nz wrote:

 On 19/03/2013 8:07 p.m., Squidblacklist wrote:
  Sir, if I do as you suggest and insert a -i
 
  refresh_pattern ^ftp:   144020% 10080
  refresh_pattern ^gopher:14400%  1440
  refresh_pattern (/cgi-bin/|\?)  0   0%  0
  refresh_pattern .   0   20% 4320
 
 
  the blacklist acls' only work half the time with the -i inserted,
  do you have any suggestions for a solution? In the meantime I am
  leaving -i out of the directive to retain functionality of the
  blacklists
 
 Very strange. All it does is make the regex pattern match 
 case-insensitive. Nothing related to ACLs.
 
 I am talking about:
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
 
 as per: http://www.squid-cache.org/Doc/config/refresh_pattern/
 
 Amos
 



Re: [squid-users] Blacklist Service for Squid Proxy - Squidblacklist.org

2013-03-19 Thread Eliezer Croitoru

This is the place to get help.
Don't hesitate to just ask.

Eliezer

On 3/19/2013 9:27 AM, Squidblacklist wrote:

Scratch that, nothing wrong with -i in the directive, It appears my
test environment has developed a routing issue directing packets to the
squid proxy, I apologize for the wasted messages



Signed,

Fix Nichols

http://squidblacklist.org


On Tue, 19 Mar 2013 20:22:15 +1300
Amos Jeffries squ...@treenet.co.nz wrote:


On 19/03/2013 8:07 p.m., Squidblacklist wrote:

Sir, if I do as you suggest and insert a -i

refresh_pattern ^ftp:   144020% 10080
refresh_pattern ^gopher:14400%  1440
refresh_pattern (/cgi-bin/|\?)  0   0%  0
refresh_pattern .   0   20% 4320


the blacklist acls' only work half the time with the -i inserted,
do you have any suggestions for a solution? In the meantime I am
leaving -i out of the directive to retain functionality of the
blacklists


Very strange. All it does is make the regex pattern match
case-insensitive. Nothing related to ACLs.

I am talking about:
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0

as per: http://www.squid-cache.org/Doc/config/refresh_pattern/

Amos





Re: [squid-users] Blacklist Service for Squid Proxy - Squidblacklist.org

2013-03-19 Thread Squidblacklist


Yes I had a minor issue with my netfilter rules that did not become
  apparent  until a recent kernel upgrade. I have remedied the issue and
  all is well. And yes, nothing wrong with -i, I have fully corrected
  the lack of this in all of my material and production servers.

Thank you.

Signed,

Fix Nichols

http://squidblacklist.org



On Tue, 19 Mar 2013 19:02:30 +0200
Eliezer Croitoru elie...@ngtech.co.il wrote:

 This is the place to get help.
 Don't hesitate to just ask.
 
 Eliezer
 
 On 3/19/2013 9:27 AM, Squidblacklist wrote:
  Scratch that, nothing wrong with -i in the directive, It appears my
  test environment has developed a routing issue directing packets to
  the squid proxy, I apologize for the wasted messages
 
 
 
  Signed,
 
  Fix Nichols
 
  http://squidblacklist.org
 
 
  On Tue, 19 Mar 2013 20:22:15 +1300
  Amos Jeffries squ...@treenet.co.nz wrote:
 
  On 19/03/2013 8:07 p.m., Squidblacklist wrote:
  Sir, if I do as you suggest and insert a -i
 
  refresh_pattern ^ftp:   144020% 10080
  refresh_pattern ^gopher:14400%  1440
  refresh_pattern (/cgi-bin/|\?)  0   0%  0
  refresh_pattern .   0   20% 4320
 
 
  the blacklist acls' only work half the time with the -i inserted,
  do you have any suggestions for a solution? In the meantime I am
  leaving -i out of the directive to retain functionality of the
  blacklists
 
  Very strange. All it does is make the regex pattern match
  case-insensitive. Nothing related to ACLs.
 
  I am talking about:
  refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
 
  as per: http://www.squid-cache.org/Doc/config/refresh_pattern/
 
  Amos
 
 
 



Re: [squid-users] Blacklist Service for Squid Proxy - Squidblacklist.org

2013-03-17 Thread Eliezer Croitoru

A very nice idea.
can you please share how do you collect these lists?

Best regards,
Eliezer

On 3/17/2013 4:00 AM, Squidblacklist wrote:



  I am inviting you all to squidblacklist.org, a new service
   specializing in blacklists formatted specifically for use with squid
   proxy integrated acl support. Your criticism and contributions are
   not only welcomed, but requisite for success.


   Thank you.


   Signed.

   Fix Nichols

   http://squidblacklist.org


[squid-users] Blacklist Service for Squid Proxy - Squidblacklist.org

2013-03-16 Thread Squidblacklist


 I am inviting you all to squidblacklist.org, a new service
  specializing in blacklists formatted specifically for use with squid
  proxy integrated acl support. Your criticism and contributions are
  not only welcomed, but requisite for success.


  Thank you.


  Signed.

  Fix Nichols

  http://squidblacklist.org


Re: [squid-users] blacklist

2012-03-05 Thread FredB
 
 Hi all.
 
 Currently I have 3 servers running with squid and haproxy balancing
 ahead of them.
 It works perfectly.
 Now I want to block porn sites, viruses, external proxies, etc ...
 I tried dansguardian and squidguard, but slows down my squid and I do
 not like.
 
 I can use?
 
 A simple acl with domains of
 http://squidguard.mesd.k12.or.us/blacklists.tgz lowered (for example)
 
 An ICAP server?
 
 Thank you.
 

Hi,

Dansguardian slow ? I agree for SquidGuard but I'm using Dansguardian without 
problem with 700 requests/second max (average 450 r/s) 
If your hardware is too light see something like opendns or better with 
dnsmasq, only for domains but faster than light and you can mix with 
dansguardian or acl for objects and urls.

Fred


Re: [squid-users] blacklist

2012-03-05 Thread Esteban Torres Rodríguez
El día 5 de marzo de 2012 09:11, FredB fredbm...@free.fr escribió:

 Hi all.

 Currently I have 3 servers running with squid and haproxy balancing
 ahead of them.
 It works perfectly.
 Now I want to block porn sites, viruses, external proxies, etc ...
 I tried dansguardian and squidguard, but slows down my squid and I do
 not like.

 I can use?

 A simple acl with domains of
 http://squidguard.mesd.k12.or.us/blacklists.tgz lowered (for example)

 An ICAP server?

 Thank you.


 Hi,

 Dansguardian slow ? I agree for SquidGuard but I'm using Dansguardian without 
 problem with 700 requests/second max (average 450 r/s)
 If your hardware is too light see something like opendns or better with 
 dnsmasq, only for domains but faster than light and you can mix with 
 dansguardian or acl for objects and urls.

The bbdd of dansguardian is not free. am I wrong?


 Fred


Re: [squid-users] blacklist

2012-03-05 Thread Ralf Hildebrandt
* Esteban Torres Rodríguez mortenol.tor...@gmail.com:

  Dansguardian slow ? I agree for SquidGuard but I'm using Dansguardian 
  without problem with 700 requests/second max (average 450 r/s)
  If your hardware is too light see something like opendns or better with 
  dnsmasq, only for domains but faster than light and you can mix with 
  dansguardian or acl for objects and urls.
 
 The bbdd of dansguardian is not free. am I wrong?

What is bbdd?
-- 
Ralf Hildebrandt   Charite Universitätsmedizin Berlin
ralf.hildebra...@charite.deCampus Benjamin Franklin
http://www.charite.de  Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155


Re: [squid-users] blacklist

2012-03-05 Thread Esteban Torres Rodríguez
El día 5 de marzo de 2012 10:39, Ralf Hildebrandt
ralf.hildebra...@charite.de escribió:
 * Esteban Torres Rodríguez mortenol.tor...@gmail.com:

  Dansguardian slow ? I agree for SquidGuard but I'm using Dansguardian 
  without problem with 700 requests/second max (average 450 r/s)
  If your hardware is too light see something like opendns or better with 
  dnsmasq, only for domains but faster than light and you can mix with 
  dansguardian or acl for objects and urls.

 The bbdd of dansguardian is not free. am I wrong?

 What is bbdd?

Sorry,

DB no. List of domains. I've tried Dansguardian with this list of domains:

http://dansguardian.org/?page=blacklist

http://urlblacklist.com/

 --
 Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
 ralf.hildebra...@charite.de        Campus Benjamin Franklin
 http://www.charite.de              Hindenburgdamm 30, 12203 Berlin
 Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155


[squid-users] blacklist

2012-03-04 Thread Esteban Torres Rodríguez
Hi all.

Currently I have 3 servers running with squid and haproxy balancing
ahead of them.
It works perfectly.
Now I want to block porn sites, viruses, external proxies, etc ...
I tried dansguardian and squidguard, but slows down my squid and I do not like.

I can use?

A simple acl with domains of
http://squidguard.mesd.k12.or.us/blacklists.tgz lowered (for example)

An ICAP server?

Thank you.


Re: [squid-users] blacklist

2012-03-04 Thread Helmut Hullen
Hallo, Esteban,

Du meintest am 04.03.12:

 Currently I have 3 servers running with squid and haproxy balancing
 ahead of them.
 It works perfectly.
 Now I want to block porn sites, viruses, external proxies, etc ...
 I tried dansguardian and squidguard, but slows down my squid and I do
 not like.

 I can use?

Every filter needs time.
squidGuard looks only for URLs - that needs not much time.
Looking vor viruses needs much time.

That's no special squid problem. That's a problem of the additional  
software.

Viele Gruesse!
Helmut


Re: [squid-users] blacklist

2012-03-04 Thread David Touzeau

Have you tried ufdbguard (www.urlfilterdb.com) ?
More fastest than squidguard



Le 04/03/2012 13:37, Esteban Torres Rodríguez a écrit :

Hi all.

Currently I have 3 servers running with squid and haproxy balancing
ahead of them.
It works perfectly.
Now I want to block porn sites, viruses, external proxies, etc ...
I tried dansguardian and squidguard, but slows down my squid and I do not like.

I can use?

A simple acl with domains of
http://squidguard.mesd.k12.or.us/blacklists.tgz lowered (for example)

An ICAP server?

Thank you.



Re: [squid-users] blacklist

2012-03-04 Thread Esteban Torres Rodríguez
El día 4 de marzo de 2012 16:03, David Touzeau da...@touzeau.eu escribió:
 Have you tried ufdbguard (www.urlfilterdb.com) ?
 More fastest than squidguard

I need something free.




 Le 04/03/2012 13:37, Esteban Torres Rodríguez a écrit :

 Hi all.

 Currently I have 3 servers running with squid and haproxy balancing
 ahead of them.
 It works perfectly.
 Now I want to block porn sites, viruses, external proxies, etc ...
 I tried dansguardian and squidguard, but slows down my squid and I do not
 like.

 I can use?

 A simple acl with domains of
 http://squidguard.mesd.k12.or.us/blacklists.tgz lowered (for example)

 An ICAP server?

 Thank you.




Re: [squid-users] blacklist

2012-03-04 Thread Marcus Kool

ufdbGuard is free software.
it works with free and commercial URL databases.


Esteban Torres Rodríguez wrote:

El día 4 de marzo de 2012 16:03, David Touzeau da...@touzeau.eu escribió:

Have you tried ufdbguard (www.urlfilterdb.com) ?
More fastest than squidguard


I need something free.




Le 04/03/2012 13:37, Esteban Torres Rodríguez a écrit :


Hi all.

Currently I have 3 servers running with squid and haproxy balancing
ahead of them.
It works perfectly.
Now I want to block porn sites, viruses, external proxies, etc ...
I tried dansguardian and squidguard, but slows down my squid and I do not
like.

I can use?

A simple acl with domains of
http://squidguard.mesd.k12.or.us/blacklists.tgz lowered (for example)

An ICAP server?

Thank you.






Re: [squid-users] blacklist to block adults sites

2011-08-29 Thread alexus
as simple/dumb way of filtering, can i filter domains for certain keywords?
how would I implement this into my squid.conf right away?


Re: [squid-users] blacklist to block adults sites

2011-08-29 Thread Marcus Kool

Alexus,

Many tried and failed.  It is not possible to filter accurately
based on a list of words.
You need a professional filter solution.

ufdbGuard is a free URL filter for Squid.
It works with both free URL databases and a commercial database.

ufdbGuard produces feedback about the quality of the
URL databases.  The free URL databases have an average coverage
of 93.4% and the commercial one from URLfilterDB has
an average coverage of 99.3%

Marcus

alexus wrote:

as simple/dumb way of filtering, can i filter domains for certain keywords?
how would I implement this into my squid.conf right away?




Re: [squid-users] blacklist to block adults sites

2011-08-28 Thread Jaime Herazo B.
I have used Squidguard very successfully in the past. You take HUGE
blocklists that bring Squid's regexes to it's knees (personally tested
this), and it just breezes through them It's also very customizable.
If you've used IPCop with the Copfilter addon, you've used Squidguard.
Also there's some blocklists that are regularly being updated, some
commercial and some free. I've written some bash scripts in the past
that get and install new ones for me.

The bad points are that there's no GUI, which is a showstopper for
many people, and that development has been somewhat slow over the
years, which shouldn't be much trouble as the software is rather
stable these days.

I recommend it. It's good, and i'd like to see reports on how well the
current 1.5 development version runs and what has thanged since the
last stable one..

2011/8/28 Helmut Hullen hul...@t-online.de:
 Hallo, alexus,

 Du meintest am 27.08.11:

 is there a blacklist of URLs/IPs that contains say an adults sites? I
 need to be able to feed that into my squid, people abusing it with
 surfing porn!

 What about squidGuard?

 Or at least the blacklist for squidGuard:

  http://squidguard.mesd.k12.or.us/blacklists.tgz

 Viele Gruesse!
 Helmut




-- 
      Reality is that which, when you stop believing in it, doesn’t go away.
Philip K. Dick


[squid-users] blacklist to block adults sites

2011-08-27 Thread alexus
is there a blacklist of URLs/IPs that contains say an adults sites? I
need to be able to feed that into my squid, people abusing it with
surfing porn! i dont have anything against porn but not through my
proxy (especially when I gotta pay for traffic)

-- 
http://alexus.org/


Re: [squid-users] blacklist to block adults sites

2011-08-27 Thread Helmut Hullen
Hallo, alexus,

Du meintest am 27.08.11:

 is there a blacklist of URLs/IPs that contains say an adults sites? I
 need to be able to feed that into my squid, people abusing it with
 surfing porn!

What about squidGuard?

Or at least the blacklist for squidGuard:

  http://squidguard.mesd.k12.or.us/blacklists.tgz

Viele Gruesse!
Helmut


[squid-users] Blacklist

2010-07-31 Thread Francesco Collini
Hello,

actually we use urlblacklist.com, we are registered users for providers.
It seems the Blacklist is not well maintained: updates are often
missing many censored sites, i tried to write them but i had no
answer...

Someone know good blacklist, also commercial, to be integrated in
Squid/Dansguardian?

Thank you, regards.
Francesco, from Italy


Re: [squid-users] Blacklist

2010-07-31 Thread Marcus Kool

Francesco,

Here is a biased answer: check out http://www.urlfilterdb.com

Marcus @ URLfilterDB


Francesco Collini wrote:

Hello,

actually we use urlblacklist.com, we are registered users for providers.
It seems the Blacklist is not well maintained: updates are often
missing many censored sites, i tried to write them but i had no
answer...

Someone know good blacklist, also commercial, to be integrated in
Squid/Dansguardian?

Thank you, regards.
Francesco, from Italy




[squid-users] Blacklist in Squid

2009-11-05 Thread michel

Hello list

A query

There will be some way, program, script or other than squidGuard  
redirector, allowing the use of blacklists that uses squidguard  
directly from the squid?


with the goal of keeping acl in squid I have without having to create  
them from scratch in the squidguard.


Thanks

Michel


This message was sent using IMP, the Internet Messaging Program.




[squid-users] blacklist format

2007-09-27 Thread Daniel Zilli
Hi Friends,

I have a doubt here.

I have a little blacklist in this format :

.msn.com
.youtube.com
.loginnet.passport.com
.ebuddy.com
.im.live.com
.mercadolivre.com


and i use this acl:

acl blacklist dstdomain /etc/squid/regras/blacklist.txt
http_access deny blacklist

but i would like to start using the srcdomain, cause is fasterbut when i
put the srcdomain...the squid stop to block my blacklist.

Do i need change my blacklist format to use the srcdomain ?

Bests,
Daniel





Re: [squid-users] blacklist format

2007-09-27 Thread Peter Albrecht
Hi Daniel,

 and i use this acl:
 
 acl blacklist dstdomain /etc/squid/regras/blacklist.txt
 http_access deny blacklist
 
 but i would like to start using the srcdomain, cause is fasterbut 
 when i put the srcdomain...the squid stop to block my blacklist.
 
 Do i need change my blacklist format to use the srcdomain ?

Did you just replace dstdomain with srcdomain in this ACL? That will never 
work. srcdomain should contain any domains from which users of your proxy 
are coming.

In your example, you would deny somebody from any domain in your list using 
your proxy. I don't think that's what you want to do, correct?

Regards,

Peter

-- 
Peter Albrecht, Novell Training Services


Re: [squid-users] blacklist format

2007-09-27 Thread Peter Albrecht
Hi Daniel,

Please reply always to the list, not directly to me.

 I think that i am  misunderstanding srcdomain and dstdomain :-) 
 Some help here. Which one should i use to build my blacklist ?

Just keep it as you used it in the beginning:

   acl blacklist dstdomain /etc/squid/regras/blacklist.txt
   http_access deny blacklist

There is no other way to achieve what you are looking for.

Regards,

Peter

-- 
Peter Albrecht  [EMAIL PROTECTED]
Novell Global Training Services
Novell GmbH Phone +49-89-20600-1801
Willy-Brandt-Allee 2Fax   +49-89-20600-2100
D-81829 Munich  http://www.novell.com/training/

Novell GmbH, GF: Volker Smid, Djamel Souici, HRB 21108 (AG Duesseldorf)



Fw: Re: [squid-users] blacklist format

2007-09-27 Thread Daniel Zilli

-- Forwarded Message ---
From: Daniel Zilli [EMAIL PROTECTED]
To: Peter Albrecht [EMAIL PROTECTED]
Sent: Thu, 27 Sep 2007 09:56:59 -0300
Subject: Re: [squid-users] blacklist format

Hi,

 Hi Daniel,
 
  and i use this acl:
  
  acl blacklist dstdomain /etc/squid/regras/blacklist.txt
  http_access deny blacklist
  
  but i would like to start using the srcdomain, cause is fasterbut 
  when i put the srcdomain...the squid stop to block my blacklist.
  
  Do i need change my blacklist format to use the srcdomain ?
 
 Did you just replace dstdomain with srcdomain in this ACL? That will 
 never work. srcdomain should contain any domains from which users of 
 your proxy are coming.

Yes... i just replace dstdomain by srcdomain. So, how does my blacklist should
be ?

 
 In your example, you would deny somebody from any domain in your 
 list using your proxy. I don't think that's what you want to do, correct?


My intention is deny people access the site that is in my blacklist

Daniel
--- End of Forwarded Message ---



Fw: Re: [squid-users] blacklist format

2007-09-27 Thread Daniel Zilli

-- Forwarded Message ---
From: Daniel Zilli [EMAIL PROTECTED]
To: Peter Albrecht [EMAIL PROTECTED]
Sent: Thu, 27 Sep 2007 10:02:36 -0300
Subject: Re: [squid-users] blacklist format

I think that i am  misunderstanding srcdomain and dstdomain :-) 
Some help here. Which one should i use to build my blacklist ?

Thanks
Daniel

-- Original Message ---
From: Peter Albrecht [EMAIL PROTECTED]
To: squid-users@squid-cache.org
Sent: Thu, 27 Sep 2007 14:52:15 +0200
Subject: Re: [squid-users] blacklist format

 Hi Daniel,
 
  and i use this acl:
  
  acl blacklist dstdomain /etc/squid/regras/blacklist.txt
  http_access deny blacklist
  
  but i would like to start using the srcdomain, cause is fasterbut 
  when i put the srcdomain...the squid stop to block my blacklist.
  
  Do i need change my blacklist format to use the srcdomain ?
 
 Did you just replace dstdomain with srcdomain in this ACL? That will 
 never work. srcdomain should contain any domains from which users of 
 your proxy are coming.
 
 In your example, you would deny somebody from any domain in your 
 list using your proxy. I don't think that's what you want to do, correct?
 
 Regards,
 
 Peter
 
 -- 
 Peter Albrecht, Novell Training Services
--- End of Original Message ---
--- End of Forwarded Message ---



[squid-users] blacklist

2006-01-17 Thread Cristina Tanzi Tolenti

Hi,

I would like yo use the blacklists that I downloaded from 
http://urlblacklist.com/, some files are very large: 10-15MB. I create  
an ACL for every blacklist

Why SQUID don't work (or it's very very slow) with the largest blacklists?

Thank you

--
-
Cristina Tanzi Tolenti
CED - Provincia di Cremona
C.so V.Emanuele II, 17 - 26100 Cremona
tel. 0372/406362
e-mail [EMAIL PROTECTED]
-




Re: [squid-users] blacklist

2006-01-17 Thread Christoph Haas
On Tuesday 17 January 2006 19:01, Cristina Tanzi Tolenti wrote:
 I would like yo use the blacklists that I downloaded from
 http://urlblacklist.com/, some files are very large: 10-15MB. I create
 an ACL for every blacklist
 Why SQUID don't work (or it's very very slow) with the largest
 blacklists?

I believe that redirectors like SquidGuard will be faster with such large 
lists. Which ACL type did you choose in Squid? dstdomain? Because 
url_regex will surely slow the process down a lot.

Also: what does don't work mean?

Kindly
 Christoph
-- 
Never trust a system administrator who wears a tie and suit.


Re: [squid-users] blacklist

2006-01-17 Thread trainier
I'm surpised squid even recovered from trying to do an acl for every 
blacklist entry.

Use squidguard, it is very simple to use.

www.squidguard.org

Tim



Christoph Haas [EMAIL PROTECTED] 
01/17/2006 02:28 PM

To
squid-users@squid-cache.org
cc

Subject
Re: [squid-users] blacklist






On Tuesday 17 January 2006 19:01, Cristina Tanzi Tolenti wrote:
 I would like yo use the blacklists that I downloaded from
 http://urlblacklist.com/, some files are very large: 10-15MB. I create
 an ACL for every blacklist
 Why SQUID don't work (or it's very very slow) with the largest
 blacklists?

I believe that redirectors like SquidGuard will be faster with such large 
lists. Which ACL type did you choose in Squid? dstdomain? Because 
url_regex will surely slow the process down a lot.

Also: what does don't work mean?

Kindly
 Christoph
-- 
Never trust a system administrator who wears a tie and suit.




Re: [squid-users] blacklist

2006-01-17 Thread Christoph Haas
Usual complaint... please reply to the original poster. /I/ wasn't the one 
having a question. (This is really a bad habit that I haven't seen to 
occur that frequently on any other mailing list.)

On Tuesday 17 January 2006 20:59, [EMAIL PROTECTED] wrote:
 I'm surpised squid even recovered from trying to do an acl for every
 blacklist entry.

I'm pretty sure she rather used something like:

acl porn-urls dstdomain /etc/squid/access/porn.urls

Still that might be not the optimal solution for Squid.

 Christoph
-- 
Never trust a system administrator who wears a tie and suit.


Re: [squid-users] blacklist

2006-01-17 Thread Kevin
On 1/17/06, Christoph Haas [EMAIL PROTECTED] wrote:
 Usual complaint... please reply to the original poster. /I/ wasn't the one
 having a question. (This is really a bad habit that I haven't seen to
 occur that frequently on any other mailing list.)

 On Tuesday 17 January 2006 20:59, [EMAIL PROTECTED] wrote:
  I'm surpised squid even recovered from trying to do an acl for every
  blacklist entry.

 I'm pretty sure she rather used something like:

 acl porn-urls dstdomain /etc/squid/access/porn.urls

Exactly -- different ACL types have different levels of efficiency,
for example, an IP-address dst ACL would be faster than any redirector,
if more difficult to maintain.


 Still that might be not the optimal solution for Squid.

Depends on what your primary goal is with filtering.

My personal and professional opinion is that urlblacklist.com is not usable
in any production deployment.

I followed their process to submit a removal request for a three-letter domain
(to remove it from the porn category) over a year ago, with no response,
and no update nor rejection (not by email, not on the rejects page).

In evaluating blacklists, I checked all of my employer's domains against
urlblacklist and also all of the top commercial filter products,
and of all the filters, only urlblacklist came up with an incorrect
categorization
(none of the domains host porn).

Kevin Kadow


Re: [squid-users] Blacklist for squirm

2005-03-08 Thread Jeff Donovan
On Mar 7, 2005, at 11:32 PM, Awie wrote:
Nevermind - I was able to download Berkeley DB v2.7.7 from SleepyCat
and
squidGuard complies now.
Bryan
Bryan,
squidguard 1.2.0  works better with Berekely DB v3.2.9, you may be 
able
to use 2.7.7 loading blacklists into memory for each redirector, which
takes forever. Using 3.2.9 will allow you much better performance 
using
pre-built database for blacklists

-j
Jeff,
If you said that DB 3.2.9 is better (it should be) than 2.7.7. How is 
about
using the latest version of BerkelyDB v4.3.27?

Thx  rgds,
Awie
I'm not sure. i was troubleshooting a problem a while back when i was 
running 2.7.7. SquidGuard 1.2 wouldn't read the pre-built data bases, 
then i found an obscure web site that listed 3.2.9
http://www.maynidea.com/squidguard/step-by-step.html

So once i installed 3.2.9 and the 2 patches it worked better than ever. 
i have not tried 4.x.x

--j
---
jeff donovan
basd network operations
(610) 807 5571 x41
AIM  xtdonovan


Re: [squid-users] Blacklist for squirm

2005-03-08 Thread Awie
 On Mar 7, 2005, at 11:32 PM, Awie wrote:
 
  Nevermind - I was able to download Berkeley DB v2.7.7 from SleepyCat
  and
  squidGuard complies now.
 
  Bryan
 
  Bryan,
 
  squidguard 1.2.0  works better with Berekely DB v3.2.9, you may be 
  able
  to use 2.7.7 loading blacklists into memory for each redirector, which
  takes forever. Using 3.2.9 will allow you much better performance 
  using
  pre-built database for blacklists
 
  -j
 
  Jeff,
 
  If you said that DB 3.2.9 is better (it should be) than 2.7.7. How is 
  about
  using the latest version of BerkelyDB v4.3.27?
 
  Thx  rgds,
 
 
  Awie
 
 I'm not sure. i was troubleshooting a problem a while back when i was 
 running 2.7.7. SquidGuard 1.2 wouldn't read the pre-built data bases, 
 then i found an obscure web site that listed 3.2.9
 http://www.maynidea.com/squidguard/step-by-step.html
 
 So once i installed 3.2.9 and the 2 patches it worked better than ever. 
 i have not tried 4.x.x
 
 --j
 

OK. Thanks for your explain.

 Thx  Rgds,

Awie



[squid-users] Blacklist for squirm

2005-03-07 Thread Bryan Miles

Hello all. I'm using Fedora R3 and discovered that squidGuard doesn't
play nicely with it due to problems with Fedora and the Berkley DB
library. So instead I installed squirm - are there downloadable
pre-configured blacklists that you can import into squirm? I haven't had
luck locating any. Thanks.

Bryan


RE: [squid-users] Blacklist for squirm

2005-03-07 Thread Bryan Miles


Nevermind - I was able to download Berkeley DB v2.7.7 from SleepyCat and
squidGuard complies now. 

Bryan

-Original Message-
From: Bryan Miles [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 07, 2005 10:03 AM
To: squid-users@squid-cache.org
Subject: [squid-users] Blacklist for squirm


Hello all. I'm using Fedora R3 and discovered that squidGuard doesn't
play nicely with it due to problems with Fedora and the Berkley DB
library. So instead I installed squirm - are there downloadable
pre-configured blacklists that you can import into squirm? I haven't had
luck locating any. Thanks.

Bryan


RE: [squid-users] Blacklist for squirm

2005-03-07 Thread Bryan Miles

I mean compiles 

-Original Message-
From: Bryan Miles [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 07, 2005 12:22 PM
To: squid-users@squid-cache.org
Subject: RE: [squid-users] Blacklist for squirm



Nevermind - I was able to download Berkeley DB v2.7.7 from SleepyCat and
squidGuard complies now. 

Bryan

-Original Message-
From: Bryan Miles [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 07, 2005 10:03 AM
To: squid-users@squid-cache.org
Subject: [squid-users] Blacklist for squirm


Hello all. I'm using Fedora R3 and discovered that squidGuard doesn't
play nicely with it due to problems with Fedora and the Berkley DB
library. So instead I installed squirm - are there downloadable
pre-configured blacklists that you can import into squirm? I haven't had
luck locating any. Thanks.

Bryan


Re: [squid-users] Blacklist for squirm

2005-03-07 Thread Jeff Donovan
On Mar 7, 2005, at 12:21 PM, Bryan Miles wrote:

Nevermind - I was able to download Berkeley DB v2.7.7 from SleepyCat 
and
squidGuard complies now.

Bryan
Bryan,
squidguard 1.2.0  works better with Berekely DB v3.2.9, you may be able 
to use 2.7.7 loading blacklists into memory for each redirector, which 
takes forever. Using 3.2.9 will allow you much better performance using 
pre-built database for blacklists

-j
---
jeff donovan
basd network operations
(610) 807 5571 x41
AIM  xtdonovan


Re: [squid-users] Blacklist for squirm

2005-03-07 Thread Awie
  Nevermind - I was able to download Berkeley DB v2.7.7 from SleepyCat
  and
  squidGuard complies now.
 
  Bryan

 Bryan,

 squidguard 1.2.0  works better with Berekely DB v3.2.9, you may be able
 to use 2.7.7 loading blacklists into memory for each redirector, which
 takes forever. Using 3.2.9 will allow you much better performance using
 pre-built database for blacklists

 -j

Jeff,

If you said that DB 3.2.9 is better (it should be) than 2.7.7. How is about
using the latest version of BerkelyDB v4.3.27?

Thx  rgds,


Awie




[squid-users] Blacklist file

2004-08-26 Thread ilopez






Hi Everybody
I want to use urlblacklist.com`s file with squidguard  but when I try to
use the free list that comes in this page my servers works very slow and if
I change this list for squidguard blacklist everything goes good..
Does anyone have any idea?.

Thanks



Re: [squid-users] Blacklist file

2004-08-26 Thread Duncan
increase your bandwidth will be the final answer should u stil want to use
that list.

- Original Message - 
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, August 26, 2004 4:24 PM
Subject: [squid-users] Blacklist file








Hi Everybody
I want to use urlblacklist.com`s file with squidguard but when I try to
use the free list that comes in this page my servers works very slow and if
I change this list for squidguard blacklist everything goes good..
Does anyone have any idea?.

Thanks




RE: [squid-users] Blacklist

2004-08-14 Thread Babar Kazmi
I think I read it some time back in this thread and Squid Guard was
recommended here as one of the free blacklist.
http://www.squidguard.org/blacklist/

There are some paid blacklists also available, but do try squidguard.

Regards

Babar Kazmi.


From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [squid-users] Blacklist
Date: Fri, 13 Aug 2004 18:29:09 -0600





Hi
I`m using squid and squidguard but my boss wants to use websense because he
thinks that websense has a better blacklist and I have to convince him that
squidguard can do it better and I`m looking for a good site to get better
blacklist .

Does somebody have any idea?

Thanks





Re: [squid-users] Blacklist

2004-08-14 Thread Hendrik Voigtländer
[EMAIL PROTECTED] wrote:
Hi
I`m using squid and squidguard but my boss wants to use websense because he
thinks that websense has a better blacklist and I have to convince him that
squidguard can do it better and I`m looking for a good site to get better
blacklist .
Hi,
I use squidguard to filter adult content only.
I am not really convinced by the squidguards blacklists available, but 
at least they are a good start. Some sites seem to register new domains 
faster than they update their content :-)
Especially not very common TLD's are missing from the lists.

What I did:
I combined all available lists together with the chastity-package 
available for debian.
The next step was a personal blacklist robot, go it from

http://sase.de/squid/
You have to feed the script with some p*rn-metasites, the more the 
better. It has difficulties to parse something else than direct 
httplinks, take care that the site does not use an exit-cgi (a lot of 
them do).
The script delivers a lot of false positives, and must be configured to 
filter them, so take care.
I wrote a small script which does a double check by taking a quick look 
with wget and parsing the result. Nothing sofisticated.

In fact it doesnt matter, how good a content filter is. There are always
possibilities to bypass them.
Easiest way to do this is google either with the cache or the translate 
feature.
Jap is another good way: http://anon.inf.tu-dresden.de/index_en.html
It is nearly impossible to block. Only way is to lock down the clients 
machines to prevent that software to be used.

IMHO a content filter can be only a warning to the users that surfing a 
certain type of sites is forbidden by policy. The enforcement must be 
done differently.

Regards, Hendrik Voigtländer


[squid-users] Blacklist

2004-08-13 Thread ilopez






Hi
I`m using squid and squidguard but my boss wants to use websense because he
thinks that websense has a better blacklist and I have to convince him that
squidguard can do it better and I`m looking for a good site to get better
blacklist .

Does somebody have any idea?

Thanks



Re: [squid-users] Blacklist

2004-08-13 Thread Bosse Klykken
On Fri, Aug 13, 2004 at 06:29:09PM -0600, [EMAIL PROTECTED] wrote:
 I`m using squid and squidguard but my boss wants to use websense because he
 thinks that websense has a better blacklist and I have to convince him that
 squidguard can do it better and I`m looking for a good site to get better
 blacklist .
 
 Does somebody have any idea?

This was recently discussed on squid-users. On August 2nd, I suggested
the following free blacklists:

http://www.linugen.com/contentfilter/
http://www.squidguard.org/blacklist/

In the same thread, Scott Phalen suggested the more comprehensive (but
unfree) blacklist:

http://urlblacklist.com

Good luck,
.../Bosse


[squid-users] Blacklist

2004-02-12 Thread Yemi Fowe

Hello all,
I will appreciate if someone can give me hint on how i
can block my clients from having access to some
spammail sites.
Thanx

--Yemi

__
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html


RE: [squid-users] Blacklist

2004-02-12 Thread Chris Wilcox
www.squidguard.org
www.dansguardian.org
You can also do some filtering with Squid itself in respect of regexp on 
URL's etc and also ban URLs/domains but I've never done this personally.

hth

Regards,

Chris

Hello all,
I will appreciate if someone can give me hint on how i
can block my clients from having access to some
spammail sites.
Thanx
--Yemi

__
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html
_
Stay in touch with absent friends - get MSN Messenger 
http://www.msn.co.uk/messenger