Re: [squid-users] acl order

2009-08-14 Thread Erwann PENCREACH
Hi Riccardo Castellani a écrit : If create these entries in squid.conf: acl wwwebay dstdomain www.ebay.com acl wwwcons dstdomain demo.consortium.com acl emmepitre url_regex ^http://.*\.mp3 acl msnmessq req_mime_type -i ^application/x-msn-messenger$ acl msnmessp rep_mime_type -i

[squid-users] Squid3 and calamarisv3

2009-08-07 Thread Erwann PENCREACH
Hi all, I've just installed calamaris, and configured generate html-frame with graph stats. It works well for the daily part. My weekly and monthly folders are empty. My question is how does it work to populate those, as there only is a cron.daily script. Should I write cron.weekly and

Re: [squid-users] Squid3 and calamarisv3

2009-08-07 Thread Erwann PENCREACH
Ok found the answer weekly reports are generated on sunday (IE dayofweek=0) and monthly reports on the first day of month (IE dayofmonth=1) sorry for the noise Erwann PENCREACH a écrit : Hi all, I've just installed calamaris, and configured generate html-frame with graph stats. It works

Re: [squid-users] howto block audio/video streaming

2009-07-22 Thread Erwann PENCREACH
Not a good Idea, for instance if you block avi You will block all avi file but also all site with url containing navigon, aviation . Gopinath Achari a écrit : simply block based on extentions of files using url_pathregex On Tuesday 21 July 2009 16:13, Muhammad Sharfuddin wrote: Squid

Re: [squid-users] howto block audio/video streaming

2009-07-21 Thread Erwann PENCREACH
Muhammad Sharfuddin a écrit : On Tue, 2009-07-21 at 22:53 +1200, Amos Jeffries wrote: Muhammad Sharfuddin wrote: Squid 2.7 STABLE 5 how can I block audio/video streaming via squid ? I have blocked a lot many streaming wesbites(like youtube) but I want to block all of them.. and I think the

Re: [squid-users] i need a little help

2009-07-17 Thread Erwann PENCREACH
Hi without any parts of config file it would be difficult to help you but if I understand correctly what you explained, the problem is not in squid config, but in you're squid server routing table. If your squid server uses your Internet gateway (2) instead of (1) it's probably because your

Re: [squid-users] i need a little help

2009-07-17 Thread Erwann PENCREACH
Please try to reply to the list, acl lan src 82.77.50.206/255.0.0.0 192.168.3.0/24 Are you sure of this? That's a very large lan, and 82.77.50.206/255.0.0.0 is a public range of IP.. badisp and badisp2 are addresses already declared in lan, so your deny acl will never match. Don't

Re: [squid-users] Help Please : NT Domain name stripping in squid_ldap_group

2009-07-10 Thread Erwann PENCREACH
Hi, there is no access rule below You need at least one to grant or deny access for instance this is one of mine : external_acl_type loggeduser %DST %SRC /squid_script_path/loggeduser_acl.sh acl isok external loggeduser http_access allow isok ### where

[squid-users] blocking binary download

2009-07-08 Thread Erwann PENCREACH
Hi all, I'm trying to write rules that will block binary downloads what I've writen : acl contenttype1 req_mime_type video audio application/octet-stream \ application/x-msdownload application/exe \ application/x-exe \ application/dos-exe

Re: [squid-users] blocking binary download

2009-07-08 Thread Erwann PENCREACH
rule. Adrian Chadd a écrit : req_mime_type won't help you if its what I remember it being ,a -request- mime type. You need to block on the -reply- mime type. adrian 2009/7/8 Erwann PENCREACH erwann.pencre...@ch-chaumont.fr: Hi all, I'm trying to write rules that will block binary downloads

[squid-users] squid 3 acl browser

2009-06-24 Thread Erwann PENCREACH
Hi all, I'm configuring a squid 3 proxy and I want, to deny access to all unwanted browsers but that is not working. here are my current acl : acl all_src src 0.0.0.0/0.0.0.0 acl nodst url_regex ^.*sex.*$

Re: [squid-users] squid 3 acl browser

2009-06-24 Thread Erwann PENCREACH
Ok, thanks, I'll try and tell you Ralf Hildebrandt a écrit : * Erwann PENCREACH erwann.pencre...@ch-chaumont.fr: Hi all, I'm configuring a squid 3 proxy and I want, to deny access to all unwanted browsers but that is not working. here are my current acl : You REALLY need to read on regular

Re: [squid-users] squid 3 acl browser

2009-06-24 Thread Erwann PENCREACH
with an external acl, this script read one parameter : %{headers} and log it in a file the only thing I got in the file is : -, this behavior is the same with Firefox Iceweasel or MSIE 6 Is there an other way to filter browsers ? thanks for all Ralf Hildebrandt a écrit : * Erwann PENCREACH

Re: [squid-users] squid 3 acl browser

2009-06-24 Thread Erwann PENCREACH
Ralf Hildebrandt a écrit : * Erwann PENCREACH erwann.pencre...@ch-chaumont.fr: acl checkua browser -i ^.*Mozilla/.*$ ^Keyvelop$ ^ClamWin/.*$ http_access deny !checkua ... In case I'm using MSIE, I shouldn't have my access granted, but I have, and getloggeduser.sh generate a log line

Re: [squid-users] squid 3 acl browser

2009-06-24 Thread Erwann PENCREACH
Ralf Hildebrandt a écrit : * Erwann PENCREACH erwann.pencre...@ch-chaumont.fr: ok, I made changes nodst and contenttype acl works fine (I'll look later for squidguard and dansguardian) browser filtering doesn't work at all external_acl works fine I don't understand what I'm doing wrong

Re: [squid-users] squid 3 acl browser

2009-06-24 Thread Erwann PENCREACH
Amos Jeffries a écrit : Erwann PENCREACH wrote: Ralf Hildebrandt a écrit : * Erwann PENCREACH erwann.pencre...@ch-chaumont.fr: ok, I made changes nodst and contenttype acl works fine (I'll look later for squidguard and dansguardian) browser filtering doesn't work at all external_acl