Re: Allowing URL with url_regex does not work
Ervin Hegedüs <[email protected]>
| Newsgroups | gmane.comp.web.squid.general |
|---|---|
| Message-ID | <[email protected]> |
Hi, On Tue, Jan 28, 2025 at 09:56:21PM +0000, Francesco Chemolli wrote: > On Tue, Jan 28, 2025 at 9:47 PM Ervin Hegedüs <[email protected]> wrote: > > > > acl wordpressgravity url_regex -i > > ^https?://s3\.amazonaws\.com\/gravityforms\/releases\/.* > > acl vmapache1 src 172.30.40.5/32 > > http_access allow vmapache1 wordpressgravity > > > > Unless you are using SSL man-in-the-middle, Squid never sees the request > URL for https. > What it sees is a CONNECT request to the domain s3.amazonaws.com; it never > sees the full path. > This is intentional, by design of https. ah, thanks - I thought that's not possible, but I saw there are many post/comments in forums where other admins used this form, and mentioned that worked... But now it's clear. > You can filter to the domain, using a combination of 3 acls: > - a CONNECT acl > - the vmapache1 acl > - a dstdomain acl for s3.amazonaws.com > > It's not possible to filter the path yeah, that works for me. Thanks again. a. _______________________________________________ squid-users mailing list [email protected] https://lists.squid-cache.org/listinfo/squid-users