RE: [squid-users] ACL Syntax and Preference

If you are using squidguard I would recommend using it to filter/block
rather than squid since that is its purpose in life. I would guess that
it would be more efficient at parsing large lists. If you aren't using
squidguard maybe you should look into it.

-----Original Message-----
From: Sturgis, Grant [mailto:Grant.Sturgis@arraybiopharma.com]
Sent: Tuesday, February 11, 2003 11:28 AM
To: squid-users@squid-cache.org
Subject: [squid-users] ACL Syntax and Preference

Greetings All,

Based on comments from Henrik and others, I am reconfiguring my ACLs. I
have block lists downloaded from squidguard and others that are quite
extensive, and I have all of them implemented as url_regex ACLs. Since
a
large portion of the lists are not URLs but domains and IP addresses, I
am
guessing that it would be smart to change the ACL type to dst or
dstdomain
when possible. So, my questions inviting confirmation or comment are:

1. dst and dstdomain ACLs are more advantageous than url_regex ACLs
because
of processing cycles necessary in regex
2. ACLs using the dst type are looking for IP addresses as elements
3. ACLs using the dstdomain type are looking for
fully-qualified-domain-names as elements.
4. Is there a better way to implement a block list similar to the
following:

207.231.72.88
209.123.16.9
205.241.44.90
14words.com
site88.8m.com
air-photo.com

Thanks for your comments,

Grant
This electronic message transmission is a PRIVATE communication which
contains information which may be confidential or privileged. The
information is intended to be for the use of the individual or entity
named
above. If you are not the intended recipient, please be aware that any
disclosure, copying, distribution or use of the contents of this
information
is prohibited. Please notify the sender of the delivery error by
replying to
this message, or notify us by telephone (877-633-2436, ext. 0), and then
delete it from your system.

**********************************************************
This message was virus scanned at siliconjunkie.net and
any known viruses were removed. For a current virus list
see http://www.siliconjunkie.net/antivirus/list.html
Received on Tue Feb 11 2003 - 10:41:50 MST