Author Topic: Howto restrict icq via squid? (Read 18945 times)

Timur · « **on:** March 15, 2004, 05:14:27 AM »

1. Can you tell me how to restrict icq access through squid?
2. Also, can you tell how to filter banners of icq?
3. Howto filter jpg and gif pictures by squid?

Thank you.

Ricky · « **Reply #1 on:** March 15, 2004, 09:31:13 AM »

Well to restrict ICQ u need to tell us that wht port exactly the ICQ use..

And if banners are images as u said jpg or gif then u can use following to block them

Code: [Select]

acl badURL url_regex -i gif jpeg
http_access deny badUrl
http_access allow myNet
http_access deny all

!!

Timur · « **Reply #2 on:** March 15, 2004, 10:29:14 AM »

Icq uses:
1. for login: login.icq.com and port 443
2. proxy settings: 192.168.0.88 port 3128 (squid)

Ricky · « **Reply #3 on:** March 15, 2004, 11:00:59 AM »

Hello..
the port 443 is used of https so we can't blcok.. otherwise it u will not able to open various others sites too.. so.. I suggest u to block all url containing the word icq..
So u can use above example with using icq instead of jpg or gif..

Timur · « **Reply #4 on:** March 15, 2004, 11:13:52 AM »

Thank you very much. One more think what does the option "-i" stands for in the script for blocking jpg and gif and icq?

Timur · « **Reply #5 on:** March 15, 2004, 11:56:14 AM »

Ricky, can you tell one thing. If I block jpg and gif pictures we use less traffic and hence pay less to our ISP than if you were not blocking pictures?

Ricky · « **Reply #6 on:** March 15, 2004, 11:56:43 AM »

" -i " is used to make the url case-insensitive..

Timur · « **Reply #7 on:** March 15, 2004, 12:58:26 PM »

Ricky, can you tell one thing. If I block jpg and gif pictures we use less traffic and hence pay less to our ISP than if you were not blocking pictures?

Ricky · « **Reply #8 on:** March 15, 2004, 02:39:12 PM »

Ya it will reduce bandwidth .. but i think u should block .\swf$ also ie.. flash animations.. but ... u can use junkbuster instead of proxy if u need less bandwidth usage.. btw i hav not used junkbuster yet..

Timur · « **Reply #9 on:** March 16, 2004, 05:23:11 AM »

Ricky, do you have a script for squid.conf which can substitute banners in icq welcome-page and in the icq window with something else (with a banner developed by me)?

Ricky · « **Reply #10 on:** March 16, 2004, 10:33:06 AM »

Man.. I think I should see how ICQ work.. b'cause i have ICQ only once..

Timur · « **Reply #11 on:** March 16, 2004, 01:08:14 PM »

Ricky, I have a problem with connecting mIRC via squid. Can you tell me what settings to put in the mIRC in order to get it connected thru squid.

Thanks a lot in advance!

Ricky · « **Reply #12 on:** March 17, 2004, 06:19:17 AM »

man i have never used Mirc..
BTW.. if you are using transparent proxy then it will simply work without doing anything but if you are using proxy then u have to specify ports . so as squid use single port usually "3128" to do every thing then u have to enter 3128 as port and ip of squid machine as host.

Timur · « **Reply #13 on:** March 17, 2004, 01:04:38 PM »

Ricky, I have a problem with deny_info tag.
I found a script which blocks banners for icq and replace them with other banners. I did everything as was written:

acl nobanners src 0/0
acl icq-begin url_regex "/usr/local/etc/squid/icq-begin.acl"
http_access deny nobanners icq-begin
deny_info http://localhost/icq-begin.html icq-begin

acl icq-banner url_regex "/usr/local/etc/squid/icq-banner.acl"
http_access deny nobanners icq-banner
deny_info http://localhost/icq-banner.html icq-banner

icq-begin.html (saved in /var/www/html):
<html>
<body>
<table valign="center" halign="center" width=100% height=94% vspace=0 hspace=0>
<tr><td>
<center>Administration greets you!</center>
<br>
<center><b>Empty (No banner)</b></center>
</td></tr>
</table>
Web-page: <a href="http://www.your.site/">http://www.your.site</a>
</body>
</html>

icq-begin.acl (saved in /etc/squid):
web\.icq\.com/welcome

icq-banner.html (saved in /var/www/html):
<html>
<head>
<title>Welcome to ICQ 2000a </title>
</head>

<body bgcolor="white">

<table width="100%" border="0">
<tr>
<td align="CENTER" valign="MIDDLE">

<b><a href="mailto:" target="_new">Is ICQ necessary for your work? If not, then quit!</a><br><br>
Administration</b>

</table>
</body>
</html>

icq-banner.acl (saved in /etc/squid):
cdn\.icq\.com/client/ate/

At the end, when I restart squid, it gives me errors with deny_info. Can you tell me what can be wrong with this code?

Thanks man!

Ricky · « **Reply #14 on:** March 17, 2004, 01:17:02 PM »

Can u give me the link where u find the script.. ?