Re: [squid-users] Full domain block

Paul Cocker wrote:
> Alas, it was all so perfectly planned. Grab some blacklists from Shalla
> - http://www.shallalist.de/ - and hook the domain lists into squid using
> dstdomain. Unfortunately, it seems squid's interpretation of domain
> names is incredibly literal, so rather than youtube.com blocking
> *.youtube.com, we in fact find that while youtube.com is blocked,
> www.youtube.com is just hunky dory because nsquid literally is blocking
> nothing but youtube.com.
>
> Since I'm running squidNT I am in a position where getting squidguard to
> run is a bit of a pain since I'll nened to get cygwin up and running and
> then it all feels like a bit of a hack. Is squidguard my only route
> here, or is there a way to tell squid to be rather more "expansive" in
> its domain name interpretation? Ideally this is something I need to get
> in place quickly.
>
> Paul
> IT Systems Admin
You could probably pre-process the domain blacklist file by doing some
variant of the following pseudocode
while ( x = read from blacklist file)
do
    print $x
    print *.$x
done

and send the output of that into your new domain blacklist.

Cheers,

/Jason
Received on Mon Nov 05 2007 - 11:46:06 MST