Re: Question About ACL

No it is not correct. Read the squid FAQ on how to setup xrated blockage. It
is mention inside a chapter...

Panagiotis S. Malakoudis

Systems Administrator
SPACE HELLAS S.A.
----- Original Message -----
From: "Nazila Mofrad" <mofrad@dpiran.net>
To: <squid-users@ircache.net>
Sent: Thursday, December 30, 1999 1:47 PM
Subject: Question About ACL

> Hi,
>
> I have an ACL entry based on "dstdomain" in "squid.conf" as the following:
>
>
> acl adulturl dstdomain "/usr/local/squid/etc/adult/fw.f"
> .
> .
> .
> http_access deny adulturl all
>
> Suppose the file of fw.f contains only one entry as:
>
> xxxhotmail.com
>
> As far as I know, that means Squid is supposed to prevent me from
accessing to
> any site which is DERIVED from xxxhotmail (e.g. www.xxxhotmail.com, etc.).
But
> it also prevents me from accessing to every other site which is a part of
> xxxhotmail.com, like: "mail.com". I think that's not a logical way to
block,
> because it's obvious that "mail.com" or "hotmail.com" is not a subdomain
of
> "xxxhotmail.com".
>
> Now, my first question: is my above mentioned explanation is correct? Or
maybe I
> make a mistake which lead to such a result?
>
> My second question: if it's correct and true, what can I do to have a
fairly
> mistake-free system for blocking porn, without using regular expression?
>
> every small comment would be appreciated,
> thanks in advance,
> Nazila M.
Received on Thu Dec 30 1999 - 09:19:16 MST