Block MP3 download using squid

[piggy2151]

Hi

I am to block downloading of MP3 songs in my office network.
Below is my script
acl denymp3 urlpath_regex -i \.MP3$
http_access deny denymp3
http_access allow all
It doesn't seems to work?
Can anyone assist.
Thanks

 

[jad]

leave off the $ ?

is this the first allow/deny statement in your file? are you letting people access files before this point?

 

[piggy2151]

Hi:

Yes this is my first deny statment.

 

[jad]

how many urls have you tested this against? if the link has something after it on the line; with the $ at the end of the string it will allow the file to download.

have you tried doing \.mp3 instead of \.MP3$ ?

just a suggestion.

another suggestion is to add other things to the list to deny, like '\.htm' and see if it stops those, for testing purposes.

 

[jono261970]

Hello,

I find this thread interesting - could somebody please tell me where you put the script?

Keep it clean! :O)

cheers,

jono

 

[jad]

in the squid.conf file in $SQUID_HOME/etc/squid.conf ...

 

[r0bertchik]

I was wondering if you ever got a solution for your problem. I am running Squid for windows and I am trying to block the downloading of .mp3 as well as .gif .jpeg files from people who are logged onto my server. I cannot figure it out. Thought maybe you can help?

 

[Dogers]

erm, as far as i am aware, squid access controls work downwards.. ie squids reading that it should block mp3's, then that it should allow everything!

 

[jad]

thats correct ... which is what he asked for ... and what he showed ...

 

[Dogers]

nono, i mean his denymp3 line should be below the allow all line

 

[jad]

then it would never deny mp3s ...

 

[jad]

squid reads down the file till it finds a rule that matches, then it stops looking.

why bother checking further if you had a line marked 'deny all' at the top of the file.

 

[Dogers]

ah ok, i was on the understanding that it read the rules, and applied them step by step, not until it matched..

back to the question, however

reading the manual, it seems urlpath_regex will only look at

http://www.microsoft.com

instead of the requested

http://www.microsoft.com/path/to/whereever/some.mp3

you want url_regex instead

http://squid.visolve.com/squid24s1/access_controls.htm#acl

 

[jad]

ahh, yup ... that is right
good job they don't have domains with mp3 in them e.g.

http://www.microsoft.mp3

 

[rsptt]

Hi -

You might want to checkout Akonix at

http://www.akonix.com.

They have a perimeter device that effectively blocks all popular P2P, as well as gives you true management of public Instant messaging.

They were recently favorably reviewed in eWeek.

 

[jad]

does that work on solaris?

 

[UnixWombat]

Piggy,
Did the change suggested by jono261970 in regard to your MP3 blocking work? I would be interested to know.