Re: [squid-users] Trouble limiting access to rutube

a very nice regex tester for you:
http://www.roblocher.com/technotes/regexp.aspx
you can try there and move on to squid.

Regards,
Eliezer

On 16/03/2012 13:34, awarecons wrote:
> acl rutube dstdomain .rutube.ru .vk.com .vkontakte.ru
> acl rutube_streams rep_header Content-Type -i application/x-shockwave-flash
> http_reply_access deny rutube rutube_streams
>
> acl rutube_Files url_regex -i \player.swf$
> http_access deny rutube rutube_Files
>
> But there is still question - how cut off .iflv instead of cutting player.swf?
>
> 2012/3/16 Amos Jeffries<squid3_at_treenet.co.nz>:
>> On 16/03/2012 8:08 a.m., awarecons wrote:
>>>
>>> Suddenly it turned out that it's impossible to deny video from
>>> www.rutube.ru by Squid means. There is the only intend to cut off
>>> video, not shockwave nor java-scripts.
>>
>>
>> Impossible? Looks very possible from that snippet you give below...
>>
>>
>>>
>>> Rutube.ru uses inframe incapsulation of video via java-script. Example:
>>> http://rutube.ru/tracks/4567054.html
>>> piece of code:
>>> <script type="text/javascript">
>>> var rt_referer = escape(location.href); playMovie('pid',
>>>
>>> 'http://rutube.ru/player.swf?buffer_first=1.0&file=http%3A%2F%2Fbl.rutube.ru%2Fdb9decb3ae2341724c72e6490b028cfd.iflv&xurl=http%3A%2F%2Frutube.ru%2Ftrackinfo%2Fdb9decb3ae2341724c72e6490b028cfd.html%3Fad_ids%3D&image=http%3A%2F%2Ftub.rutube.ru%2Fthumbs%2Fdb%2F9d%2Fdb9decb3ae2341724c72e6490b028cfd-1.jpg&&autoload=true&fsb=true&logo=false&newWnd=false&rAngle=0&uid=3692805&referer='
>>> + rt_referer);
>>> </script>
>>>
>>> So it freely passes through rep_mime_type, rep_header, url_regex ().
>>
>>
>> The first two yes possibly. But regex can catch anything, that is both its
>> benefit and part of the price. If you are not catching it with regex then
>> your regex rule is wrong.
>>
>> A urlpath_regex for "^/player\.swf" can catch these videos when paired with
>> a dstdomain ACL for rutube.ru.
>>
>>
>>>
>>> Please, give me solution how Squid and/or SquidGuard could cut off
>>> video, not disabling access to site itself. Approach is to deny video
>>> content, not site itself.
>>>
>>> NB Using rep_mime_type, rep_header, url_regex works fine with
>>> youtube.com - it lets to download shockwave player, but player is
>>> unable to download and play video.
>>
>>
>> rutube.ru is not youtube.com. They have different owners, different authors,
>> and different URL patterns. Expecting them to behave exactly the same?
>>
>> Amos
Received on Fri Mar 16 2012 - 13:42:19 MDT