Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid3 reverse - allow only specific url

    Scheduled Pinned Locked Moved pfSense Packages
    4 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dabassman
      last edited by

      Hello,
      I am trying to use squid3 as a reverse proxy.
      I want to allow only specific urls; https://test.de/a should be reachable, but https://test.de/b not.
      I configured the general page with the correct certificate, added a web server entry and added a mapping with uri a. But still everything on the server is reachable. What am i doing wrong?

      Thanks in advance

      Matthias

      1 Reply Last reply Reply Quote 0
      • H
        Hobby-Student
        last edited by

        @dabassman:

        https://test.de/a should be reachable, but https://test.de/b not.

        don't know how it's done in the web frontend…

        this

        acl name_of_acl url_regex -i https://test.de/a.*$
        cache_peer_access name_of_cache_peer allow name_of_acl
        cache_peer_access name_of_cache_peer deny all
        never_direct allow name_of_acl
        http_access allow name_of_acl
        miss_access allow name_of_acl
        http_access deny all
        miss_access deny all
        

        should block this

        https://test.de/b
        

        Don't know if this is possible in the web frontend and how to do it there. I edit my files directly via SSH. I have 8 different sites, with 3 backend servers and differrent certificates/authentication… So, your configuration is surely possible ;)

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          @Hobby-Student:

          I edit my files directly via SSH. I have 8 different sites, with 3 backend servers and differrent certificates/authentication…

          what limitations you see on package gui? We can work together to improve packages gui.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • H
            Hobby-Student
            last edited by

            @marcelloc:
            i PM you, this is OT…

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.