I have an ACL entry based on "dstdomain" in "squid.conf" as the following:
acl adulturl dstdomain "/usr/local/squid/etc/adult/fw.f"
.
.
.
http_access deny adulturl all
Suppose the file of fw.f contains only one entry as:
As far as I know, that means Squid is supposed to prevent me from accessing to
any site which is DERIVED from xxxhotmail (e.g. www.xxxhotmail.com, etc.). But
it also prevents me from accessing to every other site which is a part of
xxxhotmail.com, like: "mail.com". I think that's not a logical way to block,
because it's obvious that "mail.com" or "hotmail.com" is not a subdomain of
"xxxhotmail.com".
Now, my first question: is my above mentioned explanation is correct? Or maybe I
make a mistake which lead to such a result?
My second question: if it's correct and true, what can I do to have a fairly
mistake-free system for blocking porn, without using regular expression?
every small comment would be appreciated,
thanks in advance,
Nazila M.
Panagiotis S. Malakoudis
Systems Administrator
SPACE HELLAS S.A.