• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Блокировка медиа контента

Scheduled Pinned Locked Moved Russian
16 Posts 2 Posters 846 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • W
    werter
    last edited by werter Feb 12, 2020, 11:37 AM Feb 12, 2020, 11:28 AM

    Покажите конфиг сквида (squid.conf \ squid3.conf)

    Правило блокировки выше разрешающего стоит?

    M 1 Reply Last reply Feb 12, 2020, 11:43 AM Reply Quote 0
    • M
      modice @werter
      last edited by Feb 12, 2020, 11:43 AM

      This post is deleted!
      1 Reply Last reply Reply Quote 0
      • W
        werter
        last edited by werter Feb 12, 2020, 12:10 PM Feb 12, 2020, 11:48 AM

        Процитирую:

        В Guard'e в Target categories создал группу video, там в Regular Expression прописал
        (.*\.(3g2|3gp|3gp2|3gpp|3gpp2|asf|avi|bin|dat|f4v|flv|gtp|m4v|mov|mp4|mpeg|mpg|mts|swf|vob|wm|wmv)$)

        Создал вторую группу music, там прописал
        (.*\.(aac|flac|m3u|m3u8|m4a|m4p|m4r|mp3|mp4|mpa|msv|ogg|wav|wm|wma)$)

        И включил эту группу под запретом у пользователей, в Groups ACL.

        Покажите GroupACL и Target categories

        M 1 Reply Last reply Feb 12, 2020, 12:17 PM Reply Quote 0
        • M
          modice @werter
          last edited by Feb 12, 2020, 12:17 PM

          This post is deleted!
          1 Reply Last reply Reply Quote 0
          • W
            werter
            last edited by werter Feb 12, 2020, 12:35 PM Feb 12, 2020, 12:26 PM

            Если пойти в лоб и вместо имеющейся регулярки заблокировать тот же гугл : (.*google\.com\/.*) - сработает?
            Попробуйте.

            Зы. Redirect mode = none .т.е. просто не пускает без показа Страшной страницы?

            M 1 Reply Last reply Feb 12, 2020, 12:39 PM Reply Quote 0
            • M
              modice @werter
              last edited by modice Feb 12, 2020, 12:43 PM Feb 12, 2020, 12:39 PM

              This post is deleted!
              1 Reply Last reply Reply Quote 0
              • W
                werter
                last edited by Feb 13, 2020, 8:28 AM

                @modice
                Получается, что проблема с декодированием httpS. У вас сквид настроен как mitm (splice all) ?

                M 1 Reply Last reply Feb 13, 2020, 9:47 AM Reply Quote 0
                • M
                  modice @werter
                  last edited by Feb 13, 2020, 9:47 AM

                  This post is deleted!
                  1 Reply Last reply Reply Quote 0
                  • W
                    werter
                    last edited by werter Feb 13, 2020, 1:19 PM Feb 13, 2020, 1:18 PM

                    @modice

                    Про подмену и про настройку сквида ,к-ая позволяет "слушать" httpS.

                    M 1 Reply Last reply Feb 13, 2020, 1:28 PM Reply Quote 0
                    • M
                      modice @werter
                      last edited by modice Feb 13, 2020, 1:28 PM Feb 13, 2020, 1:28 PM

                      This post is deleted!
                      1 Reply Last reply Reply Quote 0
                      • W
                        werter
                        last edited by Feb 13, 2020, 2:47 PM

                        @modice
                        Тут уже обсудили https://forum.netgate.com/topic/148868/pfsense-squid-adgroups-https

                        1 Reply Last reply Reply Quote 0
                        16 out of 16
                        • First post
                          16/16
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                          This community forum collects and processes your personal information.
                          consent.not_received