Re: [squid-users] Why squidguard or another redirektor???

Hello all,

I put the urls and ip addresses to be blocked in a text file (over 60k
entries ) ; and configured an acl with dstdom_regex. Seems to be okay. Am I
taking the right path ? Please advise.

Regards,
Michael Fuller

----- Original Message -----
From: "SVR Anand" <anand@eis.iisc.ernet.in>
To: <squid-users@squid-cache.org>
Sent: Tuesday, November 19, 2002 10:37 AM
Subject: Re: [squid-users] Why squidguard or another redirektor???

> Hi,
>
> I found that instead of blocking based on the urls, it is convenient and
> better from performance point of view to put blocking based on the media
type.
> So, in my place I block .avi, .mpg and so forth which hog the bandwidth
than
> .jpgs and .gifs of the kind of sites you are refering to. This way you
wouldn't
> perhaps be hurting genuine sites with static images.
>
> Anand
> >
> > Hi all,
> >
> > Same requirement here too. We have used text files with url_regex to
block
> > porn and warez sites. The text files contain over 40 k entries. If using
> > url_regex can affect performance, can I use acls based on dstdomain or
dst
> > with text files ?
> >
> > Thanks and regards,
> > Michael Fuller.
>
> >
> > Hi all,
> >
> > Same requirement here too. We have used text files with url_regex to
block
> > porn and warez sites. The text files contain over 40 k entries. If using
> > url_regex can affect performance, can I use acls based on dstdomain or
dst
> > with text files ?
> >
> > Thanks and regards,
> > Michael Fuller.
> >
> >
> > ----- Original Message -----
> > From: "Henrik Nordstrom" <hno@marasystems.com>
> > To: <dumpmail@gmx.net>; <squid-users@squid-cache.org>
> > Sent: Monday, November 11, 2002 4:23 AM
> > Subject: Re: [squid-users] Why squidguard or another redirektor???
> >
> >
> > > You should not make overly large regex pattern lists. If you are
> > > making long lists then you SHOULD investigate using dstdomain or dst
> > > type ACLs where appropriate. Makes a huge difference in access
> > > control performance.
> > >
> > > A really long url_regex acl really can slow things down, and can get
> > > quite unpredictable to maintain (a small typo in a regex pattern can
> > > change the meaning significantly)
> > >
> > > A really long dstdomain or dst acl should barely be noticeable in
> > > terms of performance, and are generally much easier to maintain.
> > >
> > > Regards
> > > Henrik
> > >
> > > On Sunday 10 November 2002 18.37, dumpmail@gmx.net wrote:
> > > > Hi,
> > > >
> > > > i want to block url lists with squid 2.5STABLE1.
> > > >
> > > > Now i have a small list of urls and i want to use textfiles.
> > > > The entries in suqid.conf look like this:
> > > >
> > > > acl blockedsites url_regex -i "/etc/squid/block.txt"
> > > > acl unblockedsites url_regex -i "/etc/squid/unblock.txt"
> > > >
> > > > http_access deny blockedsites !unblockedsites
> > > >
> > > > Now i wanted to add to these files the huge blacklist of
> > > > squidguard. Does this slowdown squid or can i just use it?
> > >
> >
>
Received on Tue Nov 26 2002 - 22:01:22 MST