[squid-users] How to block multimedia content... efficiently?

From: Jason Voorhees <jvoorhees1_at_gmail.com>
Date: Tue, 23 Dec 2008 10:41:53 -0500

Hi there:

I'm running Squid to block multimedia online using something like this:

acl multimedia rep_mime_type -i "/etc/squid/multimedia.txt"
http_reply_access deny multimedia-online

/etc/squid/acl/multimedia.txt has these lines inside:

^application/vnd.ms.wms-hdr.asfv1$
^application/x-mms-framed$
^audio/x-pn-realaudio$
^audio/mid$
^audio/mpeg$
^video/flv$
^video/x-flv$
^video/x-ms-asf$
^video/x-ms-asf$
^video/x-ms-wma$
^video/x-ms-wmv$
^video/x-msvideo$
^video/x-shockwave-flash$
^application/x-shockwave-flash$

These rules work fine. Websites like www.enladisco.com or www.atevip.net
are displayed normally except the multimedia content (a flash music
player) that is correctly blocked.
My problem comes here: there are too many websites (I don't know which
exactly, maybe 10, 100 or thousands) that display valid content (not
online video nor online music) as a "application/x-shockwave-flash" mime
type, so they get blocked and end users aren't happy with that.

I started to make exceptions to those websites using something like this:

acl multimedia-exceptions dstdomain "/etc/squid/webs.txt"
http_reply_access allow multimedia-exceptions
http_reply_access deny multimedia-online

This works OK, but is unmanageable! I can't make exceptions forever just
because of application/x-shockwave-flash mime type! www.enladisco.com
uses this mime type and it should be blocked because it offers music,
but www.xtrema.com.pe doesn't offer online music and is getting blocked
when I would not want to block it.

Is anybody here having similar troubles with this? Is there any way to
block music/video using this mime type?

Thanks everyone.

P.D.: I'm sorry about my poor english
Received on Tue Dec 23 2008 - 15:42:23 MST

This archive was generated by hypermail 2.2.0 : Tue Dec 23 2008 - 12:00:02 MST