[SOLVED] Need ACLs to block particular browser in Squid3

roopakl · 04-29-2012, 05:19 AM

Hi..All,
I have configured squid3 transparent proxy on Ubuntu 11.10 and everything is working fine.
I would like to allow internet access for only Internet explorer and Mozilla Firefox browsers and would like to deny all other browsers.
I tried as below

Code:

acl firefox browser firefox
http_access deny !firefox

But the above rule is not working for me and still other browsers(chrome, aurora, seemonkey, etc) in the client's PC are able to access the internet.
Hope somebody definitely give me the squid ACLs to achieve this.
Thanks in advance for your kind help.

bathory · 04-29-2012, 09:06 AM

Hi,

You should use:

Code:

acl good_browser (.*?)Firefox (.*?)MSIE
http_access deny !good_browser

Just keep in mind that user-agents can be spoofed easily.

Regards

roopakl · 04-29-2012, 10:46 AM

Thank you bathory Guru,
I will check the above rules and let you know.
I could not understand the below.

Quote:

Just keep in mind that user-agents can be spoofed easily.

So I request you to explain with some more.
Thanks & Regards.

bathory · 04-29-2012, 11:53 AM

Quote:

Just keep in mind that user-agents can be spoofed easily.
So I request you to explain with some more.

Every browser is identified by a user-agent string. For example looking here I get for my browser:

Quote:

Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20100101 Firefox/12.0

Now this can be spoofed very easily. For firefox there is an extension that does this on the fly. I guess the same goes for other browsers. If you want to read more about UA (and spoofing), have a look at this wikipedia article.

Regards

roopakl · 05-05-2012, 11:12 AM

Sorry Bathory Guru,
I had been out of station for my personal works, so could not check and reply back.

Thanks a lot, it worked great.

And you clarified my doubts by giving those useful links.

Once again Thank you very much Sir.