[squid-users] Re: Avoiding file attachments in webmail services

Please use the squid-users mailinglist for configuration questions.
squid-bugs is for reporting bugs.

Not easily. The attached filename is not part of any URL or even HTTP
headers seen by Squid.. The file is encapsulated inside a
multipart/formdata POST request entity.

What you can do is to block multipart/formdata request mime types, but
this may also block some other forms which happens to use this type even
if they do not have a file upload control.

Another alternative is to have a noticeable size limitation on POST
requests.

Regards
Henrik

Fernando Arakaki wrote:
>
> Hi squid-fans:
> I want to avoid that users can put file attachments of some kind when
> they use webmail services like yahoo or hotmail but I can�t. I have
> this rules in my squid.conf:
>
> acl nompeg url_regex .*\.mpg.*
> acl nopost method POST
> http_access deny nompeg nopost
>
> Thanks
Received on Wed Feb 12 2003 - 19:27:11 MST