Visit Our UNIX and Linux User Community


[solved] Block access to all sites except one using Squid

 
Thread Tools Search this Thread
Homework and Emergencies Emergency UNIX and Linux Support [solved] Block access to all sites except one using Squid
# 1  
Old 08-24-2012
[solved] Block access to all sites except one using Squid

I need a Squid config that allows access to only one domain: .example.com

Traffic should only be allowed through if coming from 10.100.0.0/24

and only port 80 (http) and port 443 (https) traffic should be allowed through, but again, only to this ONE domain.

It Must be Squid (no iptables or other).

Using Squid 3.1 on Centos 6

Thanks!
# 2  
Old 08-24-2012
I am not sure about ports - but this will block evrything except <blah>
I put # for comments You also need to add localhost so some things don't break.
Code:
acl deny_net src xxx.xxx.0.1- xxx.xxx.0.254    # you get to fiddle with these two lines add more lines as needed
acl deny_net src 10.10.0.1-10.10.0.24           # this is ipv4
acl all src 0.0.0.0/0.0.0.0                             # leave this one alone

acl whitelist dstdomain .example.com
http_access deny deny_net
http_access allow whitelist allow_net
http_access deny all

If you use "acl deny all" it undoes everything above it. The chances of your breaking something are good doing something like the above.

We usually just use a router for this, and allow one subnet through.

Last edited by jim mcnamara; 08-24-2012 at 03:55 PM..
# 3  
Old 08-24-2012
On your version of squid you block ports this way:

Code:
acl Bad_ports port 1-79
acl Bad_ports port 81-442
acl Bad_ports port 444-45000
http_access_deny Bad_ports   # 80 & 443 all else from 1-45000 blocked

# 4  
Old 08-24-2012
Thanks Jim, I am ashamed to admit that the ssl issue I was having was due to not using https proxy on the client side (not a transparent proxy), so it was not even going through my Squid Server. Resolved.

---------- Post updated at 04:11 PM ---------- Previous update was at 04:11 PM ----------

Should have checked my access logs more.

Previous Thread | Next Thread
Test Your Knowledge in Computers #871
Difficulty: Medium
Hello World in Lisp is coded as: [ print "Hello world" ]
True or False?

9 More Discussions You Might Find Interesting

1. Proxy Server

How to use Squid on Linux to control certain IP to access Web Server and certain IP cannot access?

Dear all experts here, :) I would like to install a proxy server on Linux server to perform solely to control the access of Web server. In this case, some of my vendor asked me to try Squid and I have installed it onto my Linux server. I would like know how can I set the configuration to... (1 Reply)
Discussion started by: kwliew999
1 Replies

2. UNIX for Advanced & Expert Users

squid: Allow access to only one site and only via 80 or 443

Can someone please give me the conf file line to allow access to myexample.com and only that site, and only through http and https? So far I have only that site accessible via http, but all https sites are opened. Squid 3.1 on Cent 6 ---------- Post updated at 12:06 PM ---------- Previous... (0 Replies)
Discussion started by: glev2005
0 Replies

3. IP Networking

Squid vs iptables = no Squid access.log?

Hello, I have a pretty useless satellite link at home (far from any civilization), so I wanted to set up caching in order to speed things up. My Squid 2.6 runs "3128 transparent" and is set up quite well on a separate machine. I also have my dd-wrt router to move all port 80 traffic through... (0 Replies)
Discussion started by: theWojtek
0 Replies

4. UNIX for Dummies Questions & Answers

squid 3.1 block website notworking

squid 3.1.8 on fedora14 http_port 3128 transparent no-connection-auth icp_port 0 icp_query_timeout 0 mcast_icp_query_timeout 2000 dead_peer_timeout 10 seconds log_fqdn off cache_dir aufs /var/spool/squid 1024 16 256 cache_access_log /var/log/squid/access.log cache_access_log ... (0 Replies)
Discussion started by: slackman
0 Replies

5. IP Networking

Blocking sites with squid

Hi i have created a proxy with squid and i need to block all domains of yahoo let's say . i have to configure squid.conf but idk how.. (1 Reply)
Discussion started by: g0dlik3
1 Replies

6. Emergency UNIX and Linux Support

Configure Squid to use LDAP group auth to deny internet access

Hi all We have squid-2.5.STABLE11-3.FC4 running in our environment. LDAP authentication works fine. Active Directory 2003 Users are prompted to enter credentials every time they access the net. The system works perfectly, but I need to configure Squid to block users in a specific AD group.... (1 Reply)
Discussion started by: wbdevilliers
1 Replies

7. IP Networking

Block sites images with Squid!?

Hi, How i can block images from a particular site with squid? for example i want images from www.yahoo.com not displayed but other site content displayed to user? and how can i authenticate squid users (for e.g webproxy) with windows server 2003 domain controller (Active Directory) ... (0 Replies)
Discussion started by: skynet_boy
0 Replies

8. UNIX for Advanced & Expert Users

Squid cannot load https sites

Hi guys On FC9 we are running squid-3.0.STABLE2-2.fc9.i386 HTTP traffic works fine, no problems there. When I try to access a secure site, IE, Chrome and Firefox says the page cannot be loaded. I do not see any log entries in the squid access log or the servers messages file. ... (3 Replies)
Discussion started by: wbdevilliers
3 Replies

9. UNIX and Linux Applications

How to redirect to squid login web page when internet access

Hi , I am new user. As you know when acl is defined in /etc/squid/squid.conf file according to its http_access users are able to access internet. Before that .htaccess asks them to access internet. It is fine. I saw in some customised linux servers in place of .htaccess login ,html web page... (1 Reply)
Discussion started by: sandeepvson
1 Replies

Featured Tech Videos