Q. How do I block any website accessing the Internet using squid proxy server?
A. You can simply use squid ACL to block access to any web site. There are 3 steps:
#1. Create a text file with blocked domain name list such as baddomain1.com, mail.yahoo.com, gmail.com and so on
#2. Define Acl
#3. Restart squid
First, create a file called /etc/squid/blocked.domains.acl
# vi /etc/squid/blocked.domains.acl
Append domain names,
gmail.com
baddomain.com
sex.com
mail.yahoo.com
Save and close the file. Open squid.conf file:
# vi /etc/squid/squid.conf
Create acl called blockeddomain:
acl blockeddomain dstdomain "/etc/squid/blocked.domains.acl"
Deny http access, enter:
http_access deny blockeddomain
Close and save the file. Restart squid proxy server:
# /etc/init.d/squid restart
🐧 7 comments so far... add one ↓
| Category | List of Unix and Linux commands |
|---|---|
| File Management | cat |
| Firewall | Alpine Awall • CentOS 8 • OpenSUSE • RHEL 8 • Ubuntu 16.04 • Ubuntu 18.04 • Ubuntu 20.04 |
| Network Utilities | dig • host • ip • nmap |
| OpenVPN | CentOS 7 • CentOS 8 • Debian 10 • Debian 8/9 • Ubuntu 18.04 • Ubuntu 20.04 |
| Package Manager | apk • apt |
| Processes Management | bg • chroot • cron • disown • fg • jobs • killall • kill • pidof • pstree • pwdx • time |
| Searching | grep • whereis • which |
| User Information | groups • id • lastcomm • last • lid/libuser-lid • logname • members • users • whoami • who • w |
| WireGuard VPN | Alpine • CentOS 8 • Debian 10 • Firewall • Ubuntu 20.04 |
thanks for the tutorial it helped me a lot especially on blocking port and domain
Also the tutorial are ellaborative even to new comes to linux
Keep it up
Regard
Waloyce
Squid Block any Domain Name Accessing the Internet
does this resolution given works with LINUX SUSE 11.1?
I made the necessary changes but still does not work
Sputnik
explained well to understand at the first look, thank you.
explained effectively ….Thank you so much…..
this is not working at all for me ,I have rhel5server ,still clients able to access the sites .
Boomer this cannot do urls or wildcard just full domain names …