Hi,

We are using squid as proxy. We are whitelisting sites and the rest are denied. I need a help in blacklisting a certain webpage or section inside a whitelisted website. Say, we whitelisted "www.myweb.com". I need to allow all its content excep "www.myweb.com/denyme".

Thanks a lot

Hi,

You can use:
Regards

1 members found this post helpful.

Hi,

Sorry for the late reply on this. I have tried your suggestion but it still doesn't work. Our linux system was created in a way like we are only defining what to whitelist and the rest are blacklisted. That is why I think blacklisting doesn't apply to our system.
What do you think of that? Is there other way to block that webpage.

Thanks,

What happens if you put the "http_access deny denyme" before any other "http_access ..." directive?
If it still doesn't work, you could post squid.conf, so we can understand better your ACLs

Hi, please bear with me..here are the codes. I dont really know from where to where should I copy and post here but the codes below are the ones that I only play around.

#
http_access allow localhost

acl managers src "/etc/squid/managers"
acl whitelist dstdomain -i "/etc/squid/whitelist"
acl youtubelink url_regex -i "/etc/squid/youtubelinks"

http_access allow managers
http_access allow whitelist all
http_access allow youtubelink all

http_access deny all
#

Thanks,

Ok
Put the acl from post #2 along with the others and the "http_access deny .." before any "http_access allow ..."
E.g.
Note that the "http_access .." directives are read from top to bottom, so if for example you want to allow access to the denyme URL for your managers, you should move the "http_access allow managers" before the one denying access to it.

1 members found this post helpful.

Thanks bathory but it is still not working.

here is my current code now:
#
http_access allow localhost

acl managers src "/etc/squid/managers"
acl whitelist dstdomain -i "/etc/squid/whitelist"
acl youtubelink url_regex -i "/etc/squid/youtubelinks"
acl denyme url_regex -i ^https://test.myweb.com/denyme.aspx

http_access deny denyme
http_access allow managers
http_access allow whitelist all
http_access allow youtubelink all

http_access deny all
#

Notice that I changed the url into: https://test.myweb.com/denyme.aspx
That is because that's the format of the actual url. I'm sorry if I don't mentioned earlier because I'm thinking there is no such difference.

I am whitelisting "test.myweb.com" inside the "whitelist" acl so that everything under test.myweb.com will be whitelisted except for "test.myweb.com/denyme.aspx" which I want to blacklist.
Inside "whitelist" acl, we dont define if it is an "http" or "https" so when we put "test.myweb.com", it whitelisted it whether it is an https or http only.

Please help me out.

Thanks,
LA

Unfortunately it makes a big difference.
When you use squid to access an SSL site, you can block the entire site, but not a specific url of that site, because the url is transferred encrypted. Thus you can use:
But not
I guess you can still access a https site that is not in the whitelist file.

1 members found this post helpful.

Hi bathory,

I see. That is also what I am thinking that is why I posted a new thread last Jul 4th. http://www.linuxquestions.org/questi...80#post4719080

We cannot access https site if it is not inside the "whitelist" file because it seems that we have blocked the SSL ports.

That means we can never block a certain url inside a site. Please confirm. Is there no other workaround?
if there is none, then that would be the end of it and I will immediately inform my supers.

Thanks,
LA

AFAIK there is no way to block specific URLs inside a https site. You may see this for an explanation

Regards