Re: Re: Blocking Yahoo Messege in SQUID

From: sharat_ <sharat_@dont-contact.us>
Date: Fri, 07 Oct 2005 11:51:51 +0530

When we send an IM it is wrapped under POST

SQUID logs:*****************************
2005/10/03 12:48:33| httpSendRequest: FD 14:
POST /notify/ HTTP/1.0^M
Referer: pc161^M
Accept: application/octet-stream^M
Cookie: Y=v=1&n=eou8tus3stuc5&l=a0f8bc0d270d30/o&p=m2d2stc413000400&r=5s&lg=us&intl=us; T=z=YpMQDBYvhQDBFwIllf7KDgdNDM0BjA0MTA0MzNPMw--&a=YAE&sk=DAALAVYZRhKwKM&d=c2wBTXpRekFUY3pOamN6TkRRNE5BLS0BYQFZQUUBb2sBWlcwLQF0aXABOVlfdXBDAXp6AVlwTVFEQmdXQQ--^M
User-Agent: Mozilla/4.01 [en] (Win95; I)^M
Host: shttp.msg.yahoo.com^M
Content-Length: 141^M
Pragma: no-cache^M
Via: 1.0 192.168.102.17:3128 (squid/2.5.STABLE11-RC2-20050920)^M
X-Forwarded-For: 192.168.5.113^M
Cache-Control: max-age=259200^M
Connection: keep-alive^M
^M
*****************************************
Regards
Sharat

"Henrik Nordstrom"<hno@squid-cache.org> wrote:
On Thu, 6 Oct 2005, sharat_ wrote:

> Yahoo Messegenger works on YMSG Protcol which is wrapped under HTTP.
> When anyone sends an IM, at comm.c:comm_write(), I am able to filter out
> "FROM" and "TO" field of the messege, from there I connect to MySql and
> check whether IM is allowed between "FROM" and "TO", if not then I have
> to block it, but since I am not able to block, so I redirect it to
> another yahoo id by replacing the "TO" field.

How is it wrapped in HTTP?

    GET
    POST
    CONNECT

> You were pointing to some higher level of design, can you suggest me the
> right place to hook to get the "FROM" and "TO" field and at same time
> can modify the content length or block the entire packet.

Need to know what is done at the HTTP level to give you any good advice.
Don't really care about the YMSG protocol as such, only what actions in
term of HTTP you need to work with.

Regards
Henrik
Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com

 Buy The Best In BOOKS at http://www.bestsellers.indiatimes.com

Bid for for Air Tickets @ Re.1 on Air Sahara Flights. Just log on to http://airsahara.indiatimes.com and Bid Now!
Received on Fri Oct 07 2005 - 04:04:01 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Nov 01 2005 - 12:00:07 MST