OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: lfirewall1243 on October 02, 2019, 07:05:44 pm

Title: [Solved] Squid block file extensions
Post by: lfirewall1243 on October 02, 2019, 07:05:44 pm

Hey,

I am running squid as an transparent http and https proxy, with icap and clamav to scan downloads. Is it possible to block downloads with special file extensions (like .doc or .zip)? Would be very helpful because many viruses are in .doc files.

Thank you ;)

Gesendet von meinem MI 9 mit Tapatalk

Title: Re: Squid block file extensions
Post by: mimugmail on October 02, 2019, 07:38:37 pm

Isnt this possible via icap server settings?

Title: Re: Squid block file extensions
Post by: lfirewall1243 on October 02, 2019, 08:11:27 pm

I can choose
Scan for filestypes
But can't block them even if they are virus free I think.
Or I just don't know how :)

Gesendet von meinem MI 9 mit Tapatalk

Title: Re: Squid block file extensions
Post by: lfirewall1243 on October 04, 2019, 09:38:11 am

I added this to my ACL List

.*\.exe$

but its not working. Any idea? :)

Title: Re: Squid block file extensions
Post by: mimugmail on October 04, 2019, 10:34:22 am

Maybe you can try  Block specific MIME type reply in access control config?

Title: Re: Squid block file extensions
Post by: lfirewall1243 on October 04, 2019, 10:35:22 am

Quote from: mimugmail on October 04, 2019, 10:34:22 am

Maybe you can try  Block specific MIME type reply in access control config?

Thanks
Do you know how they have to look like?