Re: [squid-users] Re: Web Scanning

From: Schelstraete Bart <[email protected]>
Date: Fri, 18 Jun 2004 07:32:38 +0200

Norman Zhang wrote:

>>> I'm currently scanning web traffic through TrendMicro VirusWall
>>> using the following options. Are there shorter ways of specifying
>>> the extensions?
>>>
>>> cache_peer 127.0.0.1 parent 80 7 default no-query
>>>
>>> acl binaries urlpath_regex -i \.bin$ \.com$ \.cmd$ \.doc$ \.dot$
>>> \.drv$ \.exe$ \.sys$ \.xls$ \.xla$ \.xlt$ \.vbs$ \.js$ \.htm$
>>> \.html$ \.cla$ \.class$ \.scr$ \.mdb$ \.ppt$ \.dll$ \.ocx$ \.ovl$
>>> \.pot$ \.shs$ \.pif$ \.hlp$ \.hta$ \.mpp$ \.mpt$ \.msg$ \.oft$
>>> \.pps$ \.rtf$ \.vsd$ \.vst$ \.386$ \.arj$ \.cab$ \.gz$ \.lzh$ \.rar$
>>> \.tar$ \.swf$ \.zip$
>>>
>>> cache_peer_access 127.0.0.1 allow binaries
>>> never_direct allow binaries
>>
>
> > As far as I know there's no shorter way to do this. What you can do
> > is put those extensions in a file, and call that file with squid.
> > That makes the squid.conf not that dirty.
>
> Would the following do?
>
> cache_peer 127.0.0.1 parent 80 7 no-query default
> acl all src 0.0.0.0/0.0.0.0
> never_direct allow all
>

Then all files will be directed......I don't know if this is disered.

    B

-- 
========================================================
 You can find me on Google or Yahoo...
 search for "Schelstraete Bart" or "Bart Schelstraete"
========================================================
 Schelstraete Bart
 http://www.hansbeke.com
 email: bart at schelstraete.org
Received on Thu Jun 17 2004 - 23:32:30 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Jul 01 2004 - 12:00:02 MDT