LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-29-2012, 05:19 AM   #1
roopakl
Member
 
Registered: Sep 2011
Posts: 95

Rep: Reputation: Disabled
Need ACLs to block particular browser in Squid3


Hi..All,
I have configured squid3 transparent proxy on Ubuntu 11.10 and everything is working fine.
I would like to allow internet access for only Internet explorer and Mozilla Firefox browsers and would like to deny all other browsers.
I tried as below
Code:
acl firefox browser firefox
http_access deny !firefox
But the above rule is not working for me and still other browsers(chrome, aurora, seemonkey, etc) in the client's PC are able to access the internet.
Hope somebody definitely give me the squid ACLs to achieve this.
Thanks in advance for your kind help.

Last edited by roopakl; 04-29-2012 at 05:27 AM.
 
Old 04-29-2012, 09:06 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,073

Rep: Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971
Hi,

You should use:
Code:
acl good_browser (.*?)Firefox (.*?)MSIE
http_access deny !good_browser
Just keep in mind that user-agents can be spoofed easily.

Regards
 
1 members found this post helpful.
Old 04-29-2012, 10:46 AM   #3
roopakl
Member
 
Registered: Sep 2011
Posts: 95

Original Poster
Rep: Reputation: Disabled
Thank you bathory Guru,
I will check the above rules and let you know.
I could not understand the below.
Quote:
Just keep in mind that user-agents can be spoofed easily.
So I request you to explain with some more.
Thanks & Regards.

Last edited by roopakl; 04-29-2012 at 10:49 AM.
 
Old 04-29-2012, 11:53 AM   #4
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,073

Rep: Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971Reputation: 1971
Quote:
Just keep in mind that user-agents can be spoofed easily.
So I request you to explain with some more.
Every browser is identified by a user-agent string. For example looking here I get for my browser:
Quote:
Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20100101 Firefox/12.0
Now this can be spoofed very easily. For firefox there is an extension that does this on the fly. I guess the same goes for other browsers. If you want to read more about UA (and spoofing), have a look at this wikipedia article.

Regards
 
1 members found this post helpful.
Old 05-05-2012, 11:12 AM   #5
roopakl
Member
 
Registered: Sep 2011
Posts: 95

Original Poster
Rep: Reputation: Disabled
Sorry Bathory Guru,
I had been out of station for my personal works, so could not check and reply back.

Thanks a lot, it worked great.
And you clarified my doubts by giving those useful links.

Once again Thank you very much Sir.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How To: Block All Internet Ads in Any Web Browser BslBryan Linux - Newbie 35 08-07-2012 08:58 AM
[SOLVED] Block a browser in squid linuxmen Linux - Server 6 01-21-2012 02:18 AM
Check It ??Squid ACLS to Block Files for Specific Domain and to Spefic IP farrukhndm Linux - Server 0 12-06-2008 12:41 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 05:38 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration