LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-23-2016, 12:14 AM   #1
cheesewizz
Member
 
Registered: Aug 2004
Location: Philippines
Distribution: Centos
Posts: 221

Rep: Reputation: 15
how to block shockwave/flash or video on squid


Hi

I installed Squid Cache: Version 3.3.8 on centos 7

here is my conf

#####Allow Specific Site for Single MAC Address######
acl trainingroom arp bc:ae:c5:15:2f:d6
acl allow_websites dstdomain .facebook.com .youtube.com .alaska.com .ytimg.com .ggpht.com .googlevideo.com .taggalaxy.de
acl flash_ads rep_mime_type ^application/x-shockwave-flash$
acl flash urlpath_regex -i \.swf
acl flashwhitelist urlpath_regex "/etc/squid/allowed-swf.lst"
http_access allow allow_websites
http_access allow flashwhitelist
http_access deny flash_ads
http_access deny flash
http_access deny trainingroom
######################################################

but i can still see flash animation or even youtube video

thanks
 
Old 09-25-2016, 07:56 AM   #2
ardvark71
LQ Veteran
 
Registered: Feb 2015
Location: USA
Distribution: Lubuntu 14.04, 22.04, Windows 8.1 and 10
Posts: 6,282
Blog Entries: 4

Rep: Reputation: 842Reputation: 842Reputation: 842Reputation: 842Reputation: 842Reputation: 842Reputation: 842
Hi...

Does this page help?

Regards...
 
1 members found this post helpful.
Old 09-28-2016, 02:19 PM   #3
c0wb0y
Member
 
Registered: Jan 2012
Location: Inside the oven
Distribution: Windows
Posts: 421

Rep: Reputation: 74
Squid is an HTTP proxy and not HTTPS interceptor (although can be configured if desired). It will simple ignore any https sites carrying flash contents (or any user-defined contents on your squid.conf). All (?) of the sites you listed deliver their contents via https.

One way to deal with it is via SELinux which might a) quite difficult to deploy and can affect the overall system; b) can be an overkill, depending on your use-case.

If you don't want to get any flash or any contents from unknown (ad sites), you can employ DNS blackholing.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to allow specific video on youtube and block all other in Squid Proxy raju_t Linux - Enterprise 4 11-21-2013 01:54 AM
Squid proxy: block Flash adverts hamish Linux - Software 4 02-13-2012 07:42 AM
Problem: Youtube video screen - Shockwave flash - White screen. Firefox. NOoBuntuLinux Ubuntu 5 04-29-2010 08:44 PM
[How Can I] - Selectivly Block Flash / Shockwave Content? Svha Linux - Software 3 09-20-2003 06:14 PM
shockwave/flash? sk8guitar Linux - General 2 07-30-2003 06:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:00 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration