OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: andy on August 04, 2019, 07:45:01 pm

Title: ACLs and Remote ACLs
Post by: andy on August 04, 2019, 07:45:01 pm

I've been trying to use remote ACLs for URL filtering. I noticed a few things:

• Lists from firebog.net and energized.pro create blank files in /usr/local/etc/squid/acls
• Energized lists download but don't seem to save. If I add a print statement to fetchACLs.py during the downloading process, I can see the list coming through. I suspected this was related to comments, but firebog's lists don't have comments IIRC.
• Squid does not like having domains and subdomains of those domains together in the same ACL e.g. foo.bar.com and bar.com. This leads to a "bungled" config. It'd be helpful if these could be filtered out during the fetchACLs process.

I've also been trying to block domains using the Access Control page. I'm seeing the same domains still get through. I checked Squid's logs and saw some of my regex wasn't working properly, so I removed those entries. Still no luck.

Anyone know of a good way to do URL filtering? I've seen some alternatives floating around but none that accomplish what I'm looking for.