[SOLVED] Trying to set up a file blocking ACL in Squid with deny_info.

theIndividualist · 03-15-2013, 12:36 PM

(Using CentOS 6.4 Final & Squid 3.1.10)

Code:

acl blockfiles urlpath_regex “/etc/squid/blockfiles.acl”
http_access deny blockfiles

WORKS - gives a default squid error in the browser

Using deny_info with a standard ERR_ file in /usr/share/squid/error/en-uk/
WORKS - deny_info ERR_ACCESS_DENIED blockfiles - gives squid access denied in browser

Overwriting the content of ERR_ACCESS_DENIED with custom html
WORKS - deny_info ERR_ACCESS_DENIED blockfiles - gives custom error page in browser

But using a custom message file
FAILS i.e. deny_info ERR_BLOCKED_FILES blockfiles - Squid fails to start

The file rights (-rw-r—r--) and file ownership (root root) are the same, is the problem using a non standard file name ? (have tried several).

Help anyone ?

GlennsPref · 03-15-2013, 08:03 PM

Hi, a quick comment...

On my system squid is executable and owned by squid

That might apply to acl's (blocklists) too.

Code:

chown squid:squid /etc/squid/squid.conf
chmod a+rx /etc/squid/squid.conf

It won't hurt to try.

Next, checkout Controlling_Web_Access_with_Squidlinuxhomenetworking ch32

theIndividualist · 07-25-2013, 08:07 AM

Found a work around - adding

Code:

error_directory /usr/share/squid/errors/en-uk

to squid.conf allows the custom error messages, it disables multi-language support, but I can live with that.