9 votes

Allow a certain URL path with Squid

For anyone else like me that stumbles across this post looking for an answer. The reason is that squid can't see the full URL for HTTPS requests, only the domain. You can do a url_regex only for ...
Mike Evans's user avatar
3 votes

Allow a certain URL path with Squid

it's described here; http://wiki.squid-cache.org/SquidFaq/SquidAcl My current setup is like this; acl special_client src 10.1.255.93 acl special_url url_regex ^http://ppa.launchpad.net/adiscon/v8-...
Norbert de Rooy Connectis's user avatar
2 votes

Apache access.log flood with GET ...HTTP/1.1" requests

By looking at The logs you provide request URI. and UA are same in all requests and it's always better to block on basis of common attack vector So make block conditions using URI AND UA and other ...
Arjun sharma's user avatar
2 votes

Separate Nginx access log file for certain requests only

When I came upon this post I was looking for a way to send AWS ELB healthcheck logs to a separate file as they were clogging up access.log. I was never able to get access_log to work with if inside a ...
Joe's user avatar
  • 514
2 votes
Accepted

What firewall settings need to be used to block Microsoft Telemetry (spyware)?

You can block vortex.data.microsoft.com tempuri.org You can see that's what they're communicating to in the client-side telemetry with mssql-cli, and vscode-extension-telemtry. And, for SQL Server, ...
Evan Carroll's user avatar
  • 2,432
1 vote
Accepted

Alter database blocked by -2

Turns out it's a bug in sql server 2016 and java applications: https://support.microsoft.com/en-us/help/3145492/fix-xa-transactions-aren-t-cleaned-when-you-exit-a-java-application-in Trace flag has ...
AndrewSchmidt's user avatar
1 vote

how to disable a spcific cgi page in apache?

If you have a certain site under a different virtual host in your sites-enabled you can try adding this to the site where you don't want php: php_flag engine off
Desultory's user avatar
  • 197
1 vote
Accepted

UFW doesn't block the mongodb port

It is possible that traffic from localhost is not affected by ufw. You might try to add from 127.0.0.1 to your rule and see if that canges anything. Else, I would recommend to block that port ...
Tim Schumacher's user avatar
1 vote

Meraki blocking js and css from good sites that use Cloudfront.net

We are having the same problem. I had to whitelist cloudfront in the Meraki MX console.
Tim's user avatar
  • 11
1 vote

Squid Not Blocking SSL HTTPS Properly

As the youtube you try to block is in HTTPS, you have a problem. The proxy don't decapsulate the HTTPS to know the URL and the content, so, it is able to drop the connection. To solve your problem, ...
Dom's user avatar
  • 6,793
1 vote
Accepted

is it possible to block a certain facebook or twitter account via firewall or proxy?

It is possible to block https sites on a URL-by-URL basis, but to do this you must use SSL Inspection (often called HTTPS inspection, or Man-in-the-middle / MitM). Many proxies support this, it has a ...
Adrien's user avatar
  • 267
1 vote
Accepted

Watchguard blocking ports

The order of the firewall rules/policies that you have added is important because they are matched in order. For example, if there is an allow rule for all on top, it will get matched first and the ...
Diamond's user avatar
  • 9,141
1 vote

Allow a certain URL path with Squid

I think you're looking for something like this: http_access allow good http_access deny bad !good Because actually the good regexp matches the bad regexp as well so you need to use the AND connector ...
SamK's user avatar
  • 1,366
1 vote

Apache not serving static content concurrently

Its been a long time since this question was asked, but I was able to solve it by closing the session before the end of script execution. I had a session_start() in my header, and it was not closed. ...
thewoodcutter's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible