Re: [squid-users] /? can Defeat Squid's ACL

From: Brian <[email protected]>
Date: Thu, 22 Aug 2002 03:05:29 -0400

Could you ban \?$

Actually, in the case of www.sex.com, you should probably ban using
destination host, instead of a regex.

        -- Brian

On Thursday 22 August 2002 02:47 am, Colin Contos wrote:
> Hi,
> We use Squid in our school to block offensive websites by using ACLs
> (domain names & ip addresses). All works well except if "/?" is added to
> the domain name the site is no longer blocked. Eg www.sex.com is blocked
> but www.sex.com/? is unblocked. I have included all variations of the
> domain name in the ACL but I can not overcome this problem. It means
> that students just have to add /? to the domain name to defeat Squid's
> ACLs.
> I would appreciate any help.
> Thanks
> Colin Contos
> Lesmudie Senior High School
> West Australia
>
>
>
>
>
> Colin Contos
> Learning Technologies Coordinator
> Lesmurdie Senior High School
> ((08)9291 7888
> 2 (08) 9291 8916
> + Reid Road, Lesmurdie West Australia 6076
>
> :www.lesmurdie.wa.edu.au
Received on Thu Aug 22 2002 - 01:05:30 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:47 MST