RE: [squid-users] /? can Defeat Squid's ACL

From: Ferris, Kieran <[email protected]>
Date: Thu, 22 Aug 2002 17:13:57 +1000

I've tried that on our site and the unauthorized sites are blocked with both
"/?" and "\?".

Which version of squid are you running?

-----Original Message-----
From: Colin Contos [mailto:colin.contos@lesmurdie.wa.edu.au]
Sent: Thursday, 22 August 2002 16:48
To: squid-users@squid-cache.org
Subject: [squid-users] /? can Defeat Squid's ACL

Hi,
We use Squid in our school to block offensive websites by using ACLs
(domain names & ip addresses). All works well except if "/?" is added to
the domain name the site is no longer blocked. Eg www.sex.com is blocked
but www.sex.com/? is unblocked. I have included all variations of the
domain name in the ACL but I can not overcome this problem. It means
that students just have to add /? to the domain name to defeat Squid's
ACLs.
I would appreciate any help.
Thanks
Colin Contos
Lesmudie Senior High School
West Australia

Colin Contos
Learning Technologies Coordinator
Lesmurdie Senior High School
((08)9291 7888
2 (08) 9291 8916
+ Reid Road, Lesmurdie West Australia 6076
:www.lesmurdie.wa.edu.au
Received on Thu Aug 22 2002 - 01:14:07 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:47 MST