From 0e5008825070e9da714f33440583dd159e10fba6 Mon Sep 17 00:00:00 2001
From: btatu <btatu+gitit@evolix.fr>
Date: Tue, 26 Feb 2019 11:41:27 +0100
Subject: [PATCH] Ajout whitelist pour les referer

---
 HowtoLAMP/Squid.md | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/HowtoLAMP/Squid.md b/HowtoLAMP/Squid.md
index d62ffe8b..d2bfdd04 100644
--- a/HowtoLAMP/Squid.md
+++ b/HowtoLAMP/Squid.md
@@ -28,8 +28,9 @@ acl Safe_ports port 80          # http
 acl SSL_ports port 443 563
 
 acl WHITELIST url_regex "/etc/squid3/whitelist.conf"
+acl REFERER referer_regex "/etc/squid3/whitelist-referer.conf"
 
-<http_access> deny !WHITELIST
+<http_access> deny !REFERER !WHITELIST
 <http_access> allow INTERNE
 <http_access> deny all
 
@@ -37,6 +38,13 @@ logformat combined   %>a %[ui %[un [%tl] "%rm %ru HTTP/%rv" %>Hs %<st "%{Referer
 access_log /var/log/squid3/access.log combined
 ~~~
 
+Le fichier _whitelist-referer.conf_ contiendra les URLs autorisées en sortie dont le referer est l'un des suivants :
+
+~~~
+<https://foo.org/.*>
+<http://bar.org/.*>
+~~~
+
 Le fichier _whitelist.conf_ contiendra les URLs autorisées en sortie :
 
 ~~~