[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squid-users
Subject:    [squid-users] How to block multimedia content... efficiently?
From:       Jason Voorhees <jvoorhees1 () gmail ! com>
Date:       2008-12-23 15:41:53
Message-ID: 495106C1.9080608 () gmail ! com
[Download RAW message or body]

Hi there:

I'm running Squid to block multimedia online using something like this:

acl multimedia rep_mime_type -i "/etc/squid/multimedia.txt"
http_reply_access deny multimedia-online

/etc/squid/acl/multimedia.txt has these lines inside:

^application/vnd.ms.wms-hdr.asfv1$
^application/x-mms-framed$
^audio/x-pn-realaudio$
^audio/mid$
^audio/mpeg$
^video/flv$
^video/x-flv$
^video/x-ms-asf$
^video/x-ms-asf$
^video/x-ms-wma$
^video/x-ms-wmv$
^video/x-msvideo$
^video/x-shockwave-flash$
^application/x-shockwave-flash$

These rules work fine. Websites like www.enladisco.com or www.atevip.net
are displayed normally except the multimedia content (a flash music
player) that is correctly blocked.
My problem comes here: there are too many websites (I don't know which
exactly, maybe 10, 100 or thousands) that display valid content (not
online video nor online music) as a "application/x-shockwave-flash" mime
type, so they get blocked and end users aren't happy with that.

I started to make exceptions to those websites using something like this:

acl multimedia-exceptions dstdomain "/etc/squid/webs.txt"
http_reply_access allow multimedia-exceptions
http_reply_access deny multimedia-online

This works OK, but is unmanageable! I can't make exceptions forever just
because of application/x-shockwave-flash mime type! www.enladisco.com
uses this mime type and it should be blocked because it offers music,
but www.xtrema.com.pe doesn't offer online music and is getting blocked
when I would not want to block it.

Is anybody here having similar troubles with this? Is there any way to
block music/video using this mime type?

Thanks everyone.

P.D.: I'm sorry about my poor english
[prev in list] [next in list] [prev in thread] [next in thread]