Joe,
Henrik's "stupidity" comment was directed to the regular
expression used in your redirector, not the redirector approach
itself. Henrik also outlined a possible improvement path for you:
extract the domain name from the URL before applying the regular
expression. An alternative would be do adjust the regular expression
so that it looks at the domain name part of the URL only. The former
is probably better because the code will be more clear.
In other words, you do not need a different product, you need
to improve yours to make it less trivial to bypass.
Alex.
On Wed, 8 May 2002, CGI wrote:
> But do you know a product (redirector) which can do the same
> thinks for me, allow 20 sits and redirect all other traffic to a
> single computer?
>
> Thanks
> Joe
>
>
> --- Henrik Nordstrom <hno@marasystems.com> wrote:
> > I don't see why you can't add the IP? After all it
> > is what you have..
> >
> > Note: The redirector you have posted is overly
> > stupid.. can very easily be
> > circumvented by simply adding ;old to the requested
> > URL. You probably should
> > extract the hostname from tthe URL before matching..
> >
> > Regards
> > Henrik
> >
> >
> > CGI wrote:
> > > Sorry you are right, the site has only IP address.
> > I
> > > can not add the Ip address in redirector, I must
> > add a
> > > name. This is may problem.
> > >
> > > Thanks for your message
> > > Joe
> > >
> > > --- "Squid Support (Henrik Nordstrom)"
> > >
> > > <hno@marasystems.com> wrote:
> > > > What do you mean "without a name"?
> > > >
> > > > Without a URL there cannot be a site. The
> > hostname
> > > > of a URL may be an
> > > > IP address, but it is still a name.
> > > >
> > > > Regards
> > > > Henrik
> > > >
> > > > On Tuesday 07 May 2002 21:41, CGI wrote:
> > > > > I use a very simple configuration and use a
> > > >
> > > > redirector
> > > >
> > > > > like this to allow only a few sits for all the
> > > >
> > > > users.
> > > >
> > > > > I discovered a site without name, so my
> > question
> > > >
> > > > what
> > > >
> > > > > should I modifiy on squid to allow this
> > > >
> > > > connection.
> > > >
> > > > > Thanks in advance
> > > > >
> > > > > Joe
> > > > >
> > > > >
> > > > >
> > > > > #!/usr/bin/perl
> > > > > $|=1;
> > > > > while (<>) {
> > > > > if (/.*\.yellow\..*/ ||
> > > > > /.*\.flycast\..*/ ||
> > > > > /.*\.yellowpages\..*/ ||
> > > > > /.*\.mapquest\..*/ ||
> > > > > /.*\.mapquestdirect\..*/ ||
> > > > > /.*\.aol\..*/ ||
> > > > > /.*\.m\-w\..*/ ||
> > > > > /.*\.sympatico\..*/ ||
> > > > > /.*theweathernetwork\..*/ ||
> > > > > /.*\.ccra-adrc\..*/ ||
> > > > > /.*\.uwaterloo\..*/) {
> > > > > print;
> > > > > } else {
> > > > > print "http://10.10.10.9\n";
> > > > > }
> > > > > }
> > >
> > >
> >
> ___________________________________________________________________
> > >
> > > > >___ Games, Movies, Music & Sports!
> > > >
> > > > http://entertainment.yahoo.ca
> > > >
> > > > --
> > > > MARA Systems AB, Giving you basic free Squid
> > support
> > > > Your source of advanced web reverse proxying
> > > > solutions
> > > > http://www.marasystems.com/producs/
> > >
> > >
> >
> ______________________________________________________________________
> > > Games, Movies, Music & Sports!
> http://entertainment.yahoo.ca
>
>
> ______________________________________________________________________
> Games, Movies, Music & Sports! http://entertainment.yahoo.ca
>
Received on Wed May 08 2002 - 14:30:38 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:03 MST