# # CONFIG FILE FOR SQUIDGUARD # dbhome /var/lib/squidGuard/blacklists logdir /var/log/squidGuard # # TIME RULES: # abbrev for weekdays: # s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat #time workhours { # weekly mtwhf 08:00 - 16:30 # date *-*-01 08:00 - 16:30 #} # # REWRITE RULES: # #rew dmz { # s@://admin/@://admin.foo.bar.de/@i # s@://foo.bar.de/@://www.foo.bar.de/@i #} # # SOURCE ADDRESSES: # #src admin { # ip 1.2.3.4 1.2.3.5 # ip 192.168.xx.xx # user root foo bar # user root bjoras # within workhours #} #src foo-clients { # ip 172.16.2.32-172.16.2.100 172.16.2.100 172.16.2.200 #} #src bar-clients { # ip 172.16.4.0/26 #} # # DESTINATION CLASSES: # #dest good { #} #dest local { #} #dest adult { # domainlist blacklists/porn/domains # urllist blacklists/porn/urls # expressionlist blacklists/porn/expressions # redirect http://admin.foo.bar.de/cgi/blocked?clientaddr=%a+clientname=%n+clientuser=%i+clientgroup=%s+targetgroup=%t+url=%u #} dest bad { domainlist proxy/domains urllist proxy/urls domainlist redirector/domains urllist redirector/urls domainlist spyware/domains urllist spyware/urls domainlist suspect/domains urllist suspect/urls domainlist violence/domains urllist violence/urls domainlist warez/domains urllist warez/urls domainlist ads/domains urllist ads/urls # domainlist adult/domains - blir vel merget? # urllist adult/urls - blir vel merget? domainlist aggressive/domains urllist aggressive/urls domainlist audio-video/domains urllist audio-video/urls domainlist drugs/domains urllist drugs/urls domainlist gambling/domains urllist gambling/urls domainlist hacking/domains urllist hacking/urls domainlist mail/domains domainlist porn/domains urllist porn/urls #? domainlist proxy/domains #? urllist proxy/urls #? domainlist redirector/domains #? urllist redirector/urls #? domainlist spyware/domains #? urllist spyware/urls #? domainlist suspect/domains #? urllist suspect/urls #? domainlist violence/domains #? urllist violence/urls #? domainlist warez/domains #? urllist warez/urls } acl { # admin { # pass any # } # foo-clients within workhours { # pass good !in-addr !adult any # } else { # pass any # } # # bar-clients { # pass local none # } # default { # pass local none # rewrite dmz # redirect http://admin.foo.bar.de/cgi/blocked?clientaddr=%a+clientname=%n+clientuser=%i+clientgroup=%s+targetgroup=%t+url=%u # } default { pass !bad any redirect https://www.google.no } }