Re: [squid-users] blocking audio/video/radio streaming

Tarak Ranjan wrote:
>
>
> Amos Jeffries wrote:
>> Tarak Ranjan wrote:
>>>
>>> Hi,
>>> I want to block.online radio/audio/video streaming using squid .
>>> i have done this
>>> acl blockfiles urlpath_regex -i "/etc/squid/multimedia.files.acl"
>>> http_access deny blockfiles
>>>
>>> the content of the multimedia.files.acl
>>> \.[Aa][Vv][Ii]$
>>> \.[Mm][Pp][Gg]$
>>> \.[Mm][Pp][Ee][Gg]$
>>> \.[Mm][Pp]3$
>>> \.(afx|asf|asx|au|avi|divx|m3u|mov|mp2|mp3|mpeg|mp
>>> g|qt|ra|ram|rm|viv|vivo|vob|vqf|wav|wma|wmv|vbs|shs|pif)($|\?)
>>>
>>> but it's not working.....
>>>
>>> Thanks-----
>>> Tarak
>>
>> This will only work on streaming sites who don't care about data theft.
>> Most websites protect their media content by serving it out of scripts
>> instead of D/L'able files. That change the URI to anything they can
>> imagine.
>>
>> What you want to do is block based on reply mime-type using
>> rep_mime_type ACL and http_reply_access permissions.
>> http://www.squid-cache.org/Versions/v2/2.6/acl.html
>> http://www.squid-cache.org/Versions/v2/2.6/http_reply_access.html
>>
>> Amos
>>
>>
> acl audiovideo rep_mime_type ^video/x-ms-asf ^video/x-ms-sf ^audio/mpeg
> ^audio/x-mpeg ^audio/x-pn-realaudio ^application/x-mms framed
> ^application/vnd.ms.wms-hdr.asfv1
>
>
> http_reply_access deny audiovideo
>
> not hitting the ACL, not blocking.... any other parameter for this to block

Interesting.
  * Check that its placed in squid.conf above the default
     http_reply_access allow all

  * maybe adding -i to make it case-insensative.

  * use squidclient to pull down an object with one of those types
and check the resulting headers.

Amos
Received on Sun Nov 25 2007 - 23:10:36 MST