RE: [squid-users] block downloading extensions...!!

From: Henrik Nordstrom <hno@dont-contact.us>
Date: 10 Mar 2003 16:33:06 +0100

mån 2003-03-10 klockan 15.37 skrev Prasanta kumar Panda:
> With first method you will get problem with cached sites i.e.
>
> http://test.one.com/dwonload.exe?cache ....
>
> Will not get blocked with -i \.exe$

Well.. the above is in most cases a request for a CGI script to execute
on the server, not a download.. it may result in some file of some type
to get downloaded, or in a plain HTML response, or mostly anything
else.. (just as any other HTTP request may..)

> Where as problem with mime type is that the mime.conf get overwrites
> with the response from server I.e.
>
> As per squid mime.conf .exe is application/octet-stream, but your
> rules to block application/octet-stream don't work when you download
> from MS site as it returns mime type as "application/x-msdownload".

mime.conf is only used when Squid has to guess the MIME types, i.e. when
fetching ftp:// objects. For HTTP requests the MIME type is assigned by
the origin server.

In your example above the MIME type of a download from a MS site is
application/x-msdownload, not application/octet-stream, and if you want
to block these downloads you should block replies of mime type
application/x-msdownload.

-- 
Henrik Nordstrom <hno@squid-cache.org>
MARA Systems AB, Sweden
Received on Mon Mar 10 2003 - 08:33:52 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:13:59 MST