Blocking url in squid

amartlk · 09-16-2011, 03:41 AM

Hi

i have centos5.3 installed with squid proxy i want to block the site https://accounts.google.com

Regards
Amar

bathory · 09-16-2011, 06:03 AM

You may try:

Code:

acl bad_url dstdomain accounts.google.com
...
http_access deny bad_url

amartlk · 09-16-2011, 07:59 AM

Thanks for reply guru

But i tried the above solution it is not work , i used acl name gmail instead of bad_url

AMar

bathory · 09-16-2011, 08:22 AM

The acl name does not matter. What matters is the order of the deny and allow
You must put the deny directive before any accept directive, e.g.

Code:

acl google dstdomain accounts.google.com
...
http_access deny google
http_access allow localnet

amartlk · 09-16-2011, 08:28 AM

hi
I already kept deny directive before accept still the issue

Amar

bathory · 09-16-2011, 08:55 AM

Are you sure you're reloading squid after making the changes in squid.conf and you're using clean browser session?
If it still doesn't work check squid access_log and maybe post here the part of it, when you ask for the banned URL. Also post the acl part of squid.conf

amartlk · 09-17-2011, 12:37 AM

hi guru

I checked that if i put proxy ip address in browser then this site is not open, but if i remove proxy then his site is open , as i have Transparent proxy configured on squid server, hence i dont put proxy ip in user browser.
it this issue still there then any user can remove proxy ip and access the below said url
i think squid squid block http://accounts.google.com but not https://accounts.google.com i.e https how to solve this issue

AMAr

bathory · 09-17-2011, 03:58 AM

Hi,

Quote:

I checked that if i put proxy ip address in browser then this site is not open, but if i remove proxy then his site is open , as i have Transparent proxy configured on squid server, hence i dont put proxy ip in user browser.

The acls work even in transparent proxy, so I think that currently your clients are not using squid at all.

Quote:

i think squid squid block http://accounts.google.com but not https://accounts.google.com i.e https how to solve this issue

The acl above is blocking the domain regardless of the protocol used.

amartlk · 09-17-2011, 04:49 AM

thanks for reply , can you tell me how to solve this problem

bathory · 09-17-2011, 11:30 AM

Have a look at this howto about squid transparent proxy configuration.
In addition to the above and if the acl doesn't work, because of the https, you can change it with to:

Code:

acl google dstdomain accounts.google.com
acl CONNECT method CONNECT
...
http_access deny CONNECT google
...