RE: [squid-users] /? can Defeat Squid's ACL

From: Hermann Strassner <[email protected]>
Date: Thu, 22 Aug 2002 09:11:25 +0200

I block porn also with a regex, and here www.sex.com gets blocked as
www.sex.com/?

Maybe you have the ? defined elsewhere as allowed? (maybe direct?)

Hermann

> -----Original Message-----
> From: Colin Contos [mailto:colin.contos@lesmurdie.wa.edu.au]
> Sent: Thursday, August 22, 2002 8:48 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] /? can Defeat Squid's ACL
>
>
> Hi,
> We use Squid in our school to block offensive websites by using ACLs
> (domain names & ip addresses). All works well except if "/?" is added to
> the domain name the site is no longer blocked. Eg www.sex.com is blocked
> but www.sex.com/? is unblocked. I have included all variations of the
> domain name in the ACL but I can not overcome this problem. It means
> that students just have to add /? to the domain name to defeat Squid's
> ACLs.
> I would appreciate any help.
> Thanks
> Colin Contos
> Lesmudie Senior High School
> West Australia
>
>
>
>
>
> Colin Contos
> Learning Technologies Coordinator
> Lesmurdie Senior High School
> ((08)9291 7888
> 2 (08) 9291 8916
> + Reid Road, Lesmurdie West Australia 6076
> :www.lesmurdie.wa.edu.au
>
>
Received on Thu Aug 22 2002 - 01:11:28 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:47 MST