Re: [squid-users] Squid Block by file extension is not working.

Tuhin Black wrote:
> I have configure my squid to block some file by extension to prevent
> downloading. example,
>
> acl BlockExt url_regex -i \.mp3$ \.asx$ \.wma$ \.wmv$ \.avi$ \.mpeg$
> http_access deny BlockExt all
>
> And its working fine. most of mp3,mpg download is blocked but recently
> i have discovered user can download mp3 from some specific web site.
> like www.mp3.com. (http://www.mp3.com/free-music/11-A/all-free-music)
>
> I have check and found this sites user different kind of link to download like,
> http://dw.com.com/redir?siteid=31&edid=3&ptid=&ontid=11735&ctype=RF;Song;ATN;PTNR&cval=3;21460710;2;&desturl=http%3A%2F%2Fdownload.mp3.com%2Findex.php%3Fsect%3Dforce_download%26type%3D3%26track_id%3D21460710%26time%3D1214201264%26auth%3Db286519c195e3dc51e7c0fee7fdda182
>
> if i check my squid access log, i have only found this log,
> http://dw.com.com/redir?
> http://download.mp3.com/index.php?
>
> i am afraid maybe there is more site user can download mp3 or mpg
> files without any restriction.

Many, many, many others. Most blogs or forums for example.

>
> Did i mis configure my squid? Pls help.

As you have just found, blocking on file type is better than blocking on
file ending.

Create a "rep_mime_type" ACL and use it in http_reply_access lines to
block downloads.

Amos

-- 
Please use Squid 2.7.STABLE3 or 3.0.STABLE7