Squid Proxy Version: 3.5.12 doesn't block HTTPS

KristenU · 05-24-2018, 02:44 PM

I use the command like this in /etc/squid/squid.conf

Code:

acl ban_sites dstdomain .facebook.com .youtube.com .othersite.com
http_access deny ban_sites

(I'm sorry if I used the bad site. I have to make this work because kids in school open 18+ adult websites on computers...

)
Moderator Edit: No big deal, however it was not necessary to include it either. You want to block certain sites, that's all that's needed.
I've renamed the site name.

I have tried this as well

Code:

sudo touch /etc/squid/blacklist.txt
sudo nano /etc/squid/blacklist.txt
.youtube.com
.othersite.com
.facebook.com
sudo nano /etc/squid/blacklist.txt
acl banned dstdomain "/etc/squid/blacklist.txt"
http_access deny banned
sudo service squid restart

and after that, it just won't block it

.
Do I miss something? I have been searching and searching for solutions online but none of the solutions have worked for me :/

I have tried this as well:

Code:

acl proxy_ip src 192.168.11.56 #proxy_ip
http_access allow proxy_ip
http_access deny CONNECT banned

Then I put that 192.168.11.56 under firefox -> edit -> preferences -> advanced -> network -> proxy -> manual proxy (192.168.11.56)
Restarted firefox and tried to open facebook and it went through..
I don't know what's wrong

.
I know that IPTables will do the job but I don't want to go there yet.
If there absolutely is no way to block HTTPS by just squid proxy then idk :O. I'll listen to any of you

Help me out please :3. Thanks!!

AwesomeMachine · 05-25-2018, 07:41 AM

You can make a blacklist file, but you still have to put in squid.conf

KristenU · 05-26-2018, 07:08 AM

I tried

, didn't work

hydrurga · 05-26-2018, 07:21 AM

Do you have any subsequent http_access rules in squid.conf that could be overriding yours?

KristenU · 05-26-2018, 10:46 AM

How do I check that? :O

hydrurga · 05-26-2018, 10:48 AM

Quote:

Originally Posted by KristenU

How do I check that? :O

Look in your squid.conf file.

KristenU · 05-26-2018, 03:42 PM

I mean.. how do I know if it's overriding my http_access or not?
By deciding, what to put in order?

Edit: I'll handle this case myself

, it's easier than trying to figure out, what people say xD.
I'll post the answer here when I find the solution.

AwesomeMachine · 05-27-2018, 07:59 PM

Squid rules are run from top to bottom. So, if something is allowed first, but later it is disallowed, it will be allowed.