#
# CONFIG FILE FOR SQUIDGUARD
#
dbhome /var/lib/squidGuard/blacklists
logdir /var/log/squidGuard
#
# TIME RULES:
# abbrev for weekdays:
# s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat
#time workhours {
# weekly mtwhf 08:00 - 16:30
# date *-*-01 08:00 - 16:30
#}
#
# REWRITE RULES:
#
#rew dmz {
# s@://admin/@://admin.foo.bar.de/@i
# s@://foo.bar.de/@://www.foo.bar.de/@i
#}
#
# SOURCE ADDRESSES:
#
#src admin {
# ip 1.2.3.4 1.2.3.5
# ip 192.168.xx.xx
# user root foo bar
# user root bjoras
# within workhours
#}
#src foo-clients {
# ip 172.16.2.32-172.16.2.100 172.16.2.100 172.16.2.200
#}
#src bar-clients {
# ip 172.16.4.0/26
#}
#
# DESTINATION CLASSES:
#
#dest good {
#}
#dest local {
#}
#dest adult {
# domainlist blacklists/porn/domains
# urllist blacklists/porn/urls
# expressionlist blacklists/porn/expressions
# redirect http://admin.foo.bar.de/cgi/blocked?clientaddr=%a+clientname=%n+clientuser=%i+clientgroup=%s+targetgroup=%t+url=%u
#}
dest bad {
domainlist proxy/domains
urllist proxy/urls
domainlist redirector/domains
urllist redirector/urls
domainlist spyware/domains
urllist spyware/urls
domainlist suspect/domains
urllist suspect/urls
domainlist violence/domains
urllist violence/urls
domainlist warez/domains
urllist warez/urls
domainlist ads/domains
urllist ads/urls
# domainlist adult/domains - blir vel merget?
# urllist adult/urls - blir vel merget?
domainlist aggressive/domains
urllist aggressive/urls
domainlist audio-video/domains
urllist audio-video/urls
domainlist drugs/domains
urllist drugs/urls
domainlist gambling/domains
urllist gambling/urls
domainlist hacking/domains
urllist hacking/urls
domainlist mail/domains
domainlist porn/domains
urllist porn/urls
#? domainlist proxy/domains
#? urllist proxy/urls
#? domainlist redirector/domains
#? urllist redirector/urls
#? domainlist spyware/domains
#? urllist spyware/urls
#? domainlist suspect/domains
#? urllist suspect/urls
#? domainlist violence/domains
#? urllist violence/urls
#? domainlist warez/domains
#? urllist warez/urls
}
acl {
# admin {
# pass any
# }
# foo-clients within workhours {
# pass good !in-addr !adult any
# } else {
# pass any
# }
#
# bar-clients {
# pass local none
# }
# default {
# pass local none
# rewrite dmz
# redirect http://admin.foo.bar.de/cgi/blocked?clientaddr=%a+clientname=%n+clientuser=%i+clientgroup=%s+targetgroup=%t+url=%u
# }
default {
pass !bad any
redirect https://www.google.no
}
}