Re: [squid-users] Block ip dynamically

You can create a fifo pipe and have squid accesslogs log to that
pipe. On the other end of the pipe, write a custom log processor to
look for what and do what you want.

Note: squid takes logging VERY SERIOUSLY. If you log processor
crashes or blocks, that'll impact/crash squid.
mike

At 10:34 PM 9/30/2007, Guangwei Yuan wrote:
>Hi,
>
>We setup squid in the accelerator mode. To prevent potential cache
>poisoning, we validate the request url in the backend, and return http
>status 400 if the url is found to be invalid. Is it possible for squid
>to block an IP after seeing a certain number of 400 for the requests
>issued from that IP?
>
>Thanks in advance!
Received on Mon Oct 01 2007 - 01:46:05 MDT