|
|
@ -28,8 +28,9 @@ acl Safe_ports port 80 # http |
|
|
|
acl SSL_ports port 443 563 |
|
|
|
|
|
|
|
acl WHITELIST url_regex "/etc/squid3/whitelist.conf" |
|
|
|
acl REFERER referer_regex "/etc/squid3/whitelist-referer.conf" |
|
|
|
|
|
|
|
<http_access> deny !WHITELIST |
|
|
|
<http_access> deny !REFERER !WHITELIST |
|
|
|
<http_access> allow INTERNE |
|
|
|
<http_access> deny all |
|
|
|
|
|
|
@ -37,6 +38,13 @@ logformat combined %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st "%{Referer |
|
|
|
access_log /var/log/squid3/access.log combined |
|
|
|
~~~ |
|
|
|
|
|
|
|
Le fichier _whitelist-referer.conf_ contiendra les URLs autorisées en sortie dont le referer est l'un des suivants : |
|
|
|
|
|
|
|
~~~ |
|
|
|
<https://foo.org/.*> |
|
|
|
<http://bar.org/.*> |
|
|
|
~~~ |
|
|
|
|
|
|
|
Le fichier _whitelist.conf_ contiendra les URLs autorisées en sortie : |
|
|
|
|
|
|
|
~~~ |
|
|
|