Re: [squid-users] Verisign puts wildcard in .com and .net TLDs

From: Christoph Haas <[email protected]>
Date: Thu, 18 Sep 2003 12:30:08 +0200

On Tue, 16 Sep 2003, Sam Pointer wrote:
> More on-topic, how will Squid handle this? Say I visit `Verisignsucks.com`
> and get their sitesearch page. Squid caches it. Now I go to
> `zzzxfeuoiwqueoiwqe.com` and get the exact same content. Does Squid cache
> another whole instance or recognise that it already has the correct files,

I use a completely different approach to the VeriSign problem.
My /etc/squid.verisign reads:
 64.94.110.11
 208.254.3.130

And in the squid.conf:
 acl verisign dst "/etc/squid.verisign"
 deny_info ads-verisign.html verisign
 http_access deny ads.ip

I then put up an informational HTML page "ads-verisign.html" in the
appropriate squid directory and I am set. That really helps the users
more in understand what's going on then making access to the VeriSign
scum pages faster.

Maybe there are more IP addresses than just these two but this seems to
work in the first place.

Regards
 Christoph

-- 
~
~
".signature" [Modified] 3 lines --100%--                3,41         All
Received on Thu Sep 18 2003 - 04:30:24 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:19:56 MST