Re: [squid-users] Allowing downloads from certain sites

Shastri, try the below

Assume...
1. Preventing Downloads File (nodowns.txt) has the following
\.msi$
\.exe$
\.zip$
\.etc$

2. Trusted Sites File (goodsites.txt) has the following
*.*microsoft*.com*
*.*windows*.com*
*.*etc*.com*.com*

3. Accompanying ACLs for files above
acl nodowns urlpath_regex -i "/path_to/nodowns.txt" # With quotation marks
acl goodsites dstdomains -i "/path_to/goodsites.txt" # With quotation marks

4. Controlling Rule
http_access deny nodowns !goodsites # Put it above any "allow" rule

The above is my thinking, and I could do with correction.

# Edmonds

On Fri, Jun 29, 2012 at 12:30 PM, Chaitanya Shastri
<chait.shastri_at_gmail.com> wrote:
>
> Hi Amos,
>
>    I have acl rules for preventing downloads on client machines. So a
> client cannot download any file (for example, .exe, .zip .. etc ) on
> his/her machine.
> What I want is that all clients should be able to download any type of
> file from certain trusted domain.
> In short I want to allow a domain in my squid configuration from which
> any client can download any type of file.
>
> Thanks.
>
> On Fri, Jun 29, 2012 at 1:15 PM, Amos Jeffries <squid3_at_treenet.co.nz>
> wrote:
> > On 29/06/2012 6:10 p.m., Chaitanya Shastri wrote:
> >>
> >> Hi list,
> >>
> >>    Is it possible to allow downloads from certain trusted sites?  I
> >> tried using the url_regex acl to list certain trusted sites from which
> >> our users can download any file.
> >>
> >>    Ex. acl allow_downloads url_regex -i ^http:\/\/example\.com
> >>          http_reply_access allow allow_downloads localnet  # where
> >> localnet is my LAN range
> >>
> >>    But its not working. Any ideas on how to get it work?
> >>
> >> Thanks.
> >
> >
> > Any idea what is blocking them from working in the first place?
> >
> > Amos
> >
Received on Fri Jun 29 2012 - 11:03:05 MDT