Solution for blocking some https sites with centos
 

Hi guys,
Iam using centos5.6, and squid 2.6.STABLE21, now squid is working fine for me, it blocks the given keywords with http only, the problem is clients are accessing https versions of blocked sites, my requirment is to block https also
for eg: https://www.somesite.com
but allow https://www.goodsite.com
and i dont want iptables becaus there might be a chance for changing the ips of the blocked sites.

looking forward for a grt support

try this, may be this will helps, this should works in non transparent proxy.

acl CONNECT method CONNECT
acl bad_sites dstdomain "/etc/squid/bad_sites.txt"
http_access deny bad_sites
http_access deny bad_sites CONNECT


cat /etc/squid/bad_sites.txt
.domainname.com
.example.com
.somesite.com