Boniforti Flavio wrote:
> Hello all.
> I'm getting reports which show huge traffic amounts on some http IP
> addresses. These point to ports like 9000, 8000, 8100, 9720, and the
> like. When I put those URLs in the browser, I get to some shoutcast
> servers (let's take as an example: http://213.35.156.16:9000/). How may
> I block this sort of streaming media?
> Here the relevant log lines:
Hi Boniforti
I use this in my squid.conf file.
I basically deny the client used.
## Stop multimedia downloads ##
acl useragent browser -i ^.*NSPlayer.*
acl useragent browser -i ^.*player.*
acl useragent browser -i ^.*Windows-Media-Player.*
acl useragentq rep_mime_type ^.*video.*
acl useragentq rep_mime_type ^.*audio.*
http_access deny useragent
http_access deny useragentq
For future, you may want to try switching "log_mime_hdrs off" to on and then you will see the clients used in you
access.log.
HTH
Kind Regards
Brent Clark
Received on Tue Nov 15 2005 - 22:31:40 MST
This archive was generated by hypermail pre-2.1.9 : Thu Dec 01 2005 - 12:00:09 MST