Re: [squid-users] blocking certain filetypes more intelligent?

From: Henrik Nordstrom <[email protected]>
Date: Tue, 23 Mar 2004 00:27:23 +0100 (CET)

On Mon, 22 Mar 2004, Frank Fegert wrote:

> Hi all,
>
> i'm looking for a way to block certain file downloads within squid. I
> currently apply a list of filename extensions with url_pathregex to an
> acl.

Ok.

You may also want to look into the rep_mime_type acl (in
http_reply_access) for a more firm filetype access control.

> As for the filename-extension-does-not-match- the-real-file-type-problem
> i thought about a external-helper performing checks based upon the UNIX
> "file" command resp. magic bytes. This could be problematic, since the
> file has to be retrieved first in order to check its filetype.

Not easily done with Squid unfortunately.

ICAP would be the way to go for a thing like this.

Yes, performance matters, especially bandwidth performance..

Regards
Henrik
Received on Mon Mar 22 2004 - 17:54:50 MST

This archive was generated by hypermail pre-2.1.9 : Thu Apr 01 2004 - 12:00:02 MST