No, definitely it is NOT a good idea.
Squidguard has been created and exists to filter internal requests coming
from your internal user, directed to the outside world.

Why do you want to use a fork to cut a beef, if you can use a knife ?

To do what you want there are tons of tools, some of which are known as
"application level firewalls".



-----Messaggio originale-----
Da: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] conto di Henri Chevreton
Inviato: martedi 1 febbraio 2005 14.13
A: [email protected]
Oggetto: using squidguard to protect my servers


Hi everybody,


May be it's not a good idea to use squidguard to
filter request to my web servers.
I would like to reject request that look dangerous,
so I put in a  /var/lib/squidguard/db/good/expressions
what I think is good:

for simple queries
^http://[0-9a-zA-Z._/-]+$

with one parameter
^http://[0-9a-zA-Z._/-]+[\?][0-9a-zA-Z._]+=[0-9a-zA-Z._]+$

So my question is : is-it possible to say that many parameters
are good, each one of the form
[\&][0-9a-zA-Z._]+=[0-9a-zA-Z._]+

But my main question is :
Is it a good idea to use squidguard like that ?

Thanks in advance,
--
______________________________________________
Henri Chevreton            E.N.I. de Brest
tel 02 98 05 66 62         CS 73862
[EMAIL PROTECTED]          29238 BREST CEDEX 3
______________________________________________



Reply via email to