LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-05-2020, 06:32 AM   #1
Arjun_K
LQ Newbie
 
Registered: May 2020
Posts: 1

Rep: Reputation: Disabled
Squid Proxy not blocking any sites which are denied ... Kindly help !!!


The squid proxy configured is not blocking the sites. Kindly help me in configuring the configuration file to block the sites. I have explicitly used a denylist file and contains the necessary URLs and the squid is not blocking.

###Configuration File###

####IP Ranges allowed to use proxy
acl localnet src 10.202.2.16
acl localnet src 10.202.2.80
acl localnet src 10.202.2.102
acl localnet src 10.201.50.10

acl localnet src 10.196.0.0/16
acl localnet src 10.197.0.0/16
acl localnet src 10.198.0.0/16
acl localnet src 10.199.0.0/16
acl localnet src 10.200.0.0/16


acl windowsupdate dstdomain windowsupdate.microsoft.com
acl windowsupdate dstdomain .update.microsoft.com
acl windowsupdate dstdomain download.windowsupdate.com
acl windowsupdate dstdomain redir.metaservices.microsoft.com
acl windowsupdate dstdomain images.metaservices.microsoft.com
acl windowsupdate dstdomain c.microsoft.com
acl windowsupdate dstdomain www.download.windowsupdate.com
acl windowsupdate dstdomain wustat.windows.com
acl windowsupdate dstdomain crl.microsoft.com
acl windowsupdate dstdomain sls.microsoft.com
acl windowsupdate dstdomain productactivation.one.microsoft.com
acl windowsupdate dstdomain ntservicepack.microsoft.com
acl windowsupdate dstdomain eu.vortex-win.data.microsoft.com
acl windowsupdate dstdomain eu-v20.events.data.microsoft.com
acl windowsupdate dstdomain usseu1northprod.blob.core.windows.net
acl windowsupdate dstdomain usseu1westprod.blob.core.windows.net
acl windowsupdate dstdomain winatp-gw-neu.microsoft.com
acl windowsupdate dstdomain winatp-gw-weu.microsoft.com
acl windowsupdate dstdomain wseu1northprod.blob.core.windows.net
acl windowsupdate dstdomain wseu1westprod.blob.core.windows.net
acl windowsupdate dstdomain automatedirstrprdweu.blob.core.windows.net
acl windowsupdate dstdomain automatedirstrprdneu.blob.core.windows.net
acl windowsupdate dstdomain play.google.com
acl windowsupdate dstdomain go.microsoft.com

acl CONNECT method CONNECT
acl wuCONNECT dstdomain www.update.microsoft.com
acl wuCONNECT dstdomain sls.microsoft.com
http_access allow CONNECT wuCONNECT localnet
http_access allow windowsupdate localnet

####Access and Deny of URL/Ports
acl Safe_ports port 80 # http
acl Safe_ports port 443 # https

####Allowed and Denied URLs
acl allowedurl dstdomain /etc/squid/allowed_url.txt
acl denylist dstdomain /etc/squid/denylist.txt

http_access allow allowedurl
http_access deny denylist
http_access allow localnet
http_access allow localhost manager
http_access allow localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny all

http_port 8080

cache_dir ufs /var/spool/squid 10000 16 256
coredump_dir /var/spool/squid

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
refresh_pattern -i windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
refresh_pattern -i microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
refresh_pattern -i windows.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims


Denylist File:
www.youtube.com
*.facebook.com
*.yahoo.com
*.msn.com
www.reddit.com
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid Proxy 3.5/SquidGuard on CentOS 7(Minimal) - Squid not blocking at all n01k Linux - Newbie 1 01-17-2020 02:15 AM
[SOLVED] Squid+DansGuardian not working properly. squid blocking sites that should be linuxlover.chaitanya Linux - Server 13 11-10-2014 10:34 AM
squid 2.6 not blocking sites even i entered ACL to block sites mohantorvalds Linux - Server 1 01-08-2009 04:17 AM
Squid proxy server (Kindly help out) bally Linux - Newbie 2 01-20-2003 07:39 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 02:53 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration