[SOLVED] Squid proxy server Help??

mail4vijay · 11-17-2009, 06:09 AM

Hi,

I have configured the squid proxy server on CentOS5 with the help of acl blocking.... and it is running fine , i got acl database blocking list fro http://squidgards.org site which is having almost 200000 porn sites database.. and now i can block yahoo.com / rediff / and anyother mail sites..

My problem is that after implementing squid server it is blocking some of important urls that is required for the company users... and should be accessible even after squid...

Can anyone please let me know how to allow certain urls or web-links time to time from the squid proxy server.... as it is very difficult for me to check entry in 200000 ulrs database to see which entry is blocking for some of the important urls for my organization..

Any help would be greatly appreciated.

cardy · 11-17-2009, 11:29 AM

Create a new rule that lists the sites to which you want to allow access

Quote:

acl allowed_sites_regex url_regex -i ^http://myurl.that.i.want.to.allow

The above rule creates a list of urls based on regex patterns you could use domain names or the other supported methods. The URLs should be one on a line or better still they should be stored in a file such as

Quote:

acl allowed_sites_regex url_regex -i "/etc/squid/allowed_sites_regex.txt"

Put the regex's into the file one on each line. Then before your rule that adds the squidguards block list put the rule

Quote:

http_access allow allowed_sites_regex

Your list is checked first, if the URL they are trying to access is in your URL regex list in your file then they will be allowed if not it continues on to check the blacklist.
Note: that the order of the http_access entries matters.

mail4vijay · 11-18-2009, 12:37 AM

Quote:

Originally Posted by cardy

Create a new rule that lists the sites to which you want to allow access

The above rule creates a list of urls based on regex patterns you could use domain names or the other supported methods. The URLs should be one on a line or better still they should be stored in a file such as

Put the regex's into the file one on each line. Then before your rule that adds the squidguards block list put the rule

Your list is checked first, if the URL they are trying to access is in your URL regex list in your file then they will be allowed if not it continues on to check the blacklist.
Note: that the order of the http_access entries matters.

Thanks So much that really worked for me.