Blocking Internet Explorer with the Squid Web proxy
/etc/squid/squid.conf :
#We want to block IE, but some sites are only working under IE
# so we put up a list of URLs for Internet Explorer in the following file
acl allowed_url_IE url_regex -i "/etc/squid/allowed_url"
### The ACL for the IE user-agent
acl internet_explorer browser MSIE
### The world
acl all src 0.0.0.0/0.0.0.0
### Internal Network
acl lan src 192.168.1.0/24
### allowed machines in the network to use IE
acl ie_allowed_machine src 192.168.1.100/32
### First, we are allowing the IE-machine here
http_access allow ie_allowed_machine internet_explorer
### here, we are denying Internet Explorer,
### except for the "safe URL" list that is still allowed.
http_access deny internet_explorer !allowed_url_IE
### Now, after the restrictions, we are allowing our network.
http_access allow lan
### And finally blocking the rest of the world.
http_access deny all
The Allowed url ACL file (/etc/squid/safe_url) looks like this :
http://.*\.capstocks.biz/.*
http://.*\.tvsesupport.com/.*
http://.*\.ceattingal.ac.in/.*
No comments:
Post a Comment