Squidguard Regular Expression

[TTGest]

Hi,
I've realized that from pfSense 2.5 to 2.6 if using Regular Expression in SquidGuard, only main part of URL is parsed.

EG: if Regular expression contains

.*\.(com)

all pages like ebay.COM, google.COM and so are blocked.

If Regular Expression is

winzip

www.winzip.com is blocked but www.test.com/winzip it's bypassed.

My main goal it's to block downloads by extension, but only it could be solved when all the URL will be parsed.

[Michele Trotta]

Hello,

try with
(. * \ /.* . (EXE | COM | BAT))

Block all downloads with FIle .EXE .COM and .BAT

Michele

[TTGest]

Thanks Michele, but it doesn't work. As I stated in first post, it seems to be a bug as only www.domain.com part is parsed, but not the rest of the URL.

EG. if URL is www.domain.com/downloads/app.exe , your Regex will not match, as "exe" is not a pattern in www.domain.com which is the only string which seems to be evaluated.

Maybe a Netgate programmer could take a look over this issue? Where to publish a bug?

Regards!

[Michele Trotta]

Hi ttgest,
this export ONLY blocks downloads.

If you need to block downloads then

• create a new target categories called Block_EXE
• in regula expression copy this (. * \ /.*. (EXE | COM | BAT))
• Save
• in your Groups ACL (for example G_TEST) deny the Block_EXE
• save
  After saving, go to General Settings and Apply!

Michele

[JonathanLee]

@ttgest you can also try a regular expression tester online. I found a good one. I was having issues with t.co I wanted it blocked however it would block microsoft.com I had to adjust and test with the regular expression tester. Some basic examples below.

!

!