Squid3 whitelist

[aspenpilot]

pfSense 2.2.4
Squid3 0.3.4

Test the blacklist function in squid3 by placing the entry .cnn.com in the blacklist box.  User receives default squid3 access denied page.  I then removed the blacklist entry and put it in the whitelist box.  Users are able to go to any website which has not been entered in whitelist box.  I understood the whitelist to be only the sites which are permitted..no others will be allowed.  Am I doing something incorrectly?  Any help would be greatly appreciated.

UPDATE: Not sure if this is the best way, but I have figured out how to do a whitelist.  I put .com in the blacklist section, and then put the specific sites which are to be allowed in the whitelist section.

[doktornotor]

Perhaps you could try these instead for you whitelist?

*.cnn.com/*

or even

^(http|https|mms)://([^/]+[.])?(?i:cnn[.]com)(/.*)?$

On another note - blacklisting something like *.com is not a viable approach to usable web, nor it this maintainable in any reasonable way.  :o ::)

[aspenpilot]

Thanks for the suggestion.  I'll try it in a few hours.