search

alexott / squid-gsb

Support for Google Safe Browsing API in Squid
http://alexott.net/en/cf/squid-gsbapi.html
GNU General Public License v2.0
8 stars 1 forks source link

Redirected to wrong URL #9

Closed pmjdebruijn closed 13 years ago

pmjdebruijn commented 13 years ago

It seems Squid-GSB is redirecting to a "wrong" URL whenever it encounters a bad page:

http://sb.google.com/safebrowsing/update?client=api&apikey=ABQIAAAAJmX7OrvGHaY_K5aehGqz5BRV_RVr3hQ1O0b_lkPpH_yKwLn0_Q&version=goog-black-hash:1:-1

This actually leads to a page where the hashlist is downloaded, so I don't think users should be redirected there...

alexott commented 13 years ago

Could you show your config (without key)

pmjdebruijn commented 13 years ago

Sure... heh... Actually that URL already has my key in it :(

black-hash-file = /var/cache/squid-gsb/black-hash.dat malware-hash-file = /var/cache/squid-gsb/malware-hash.dat debug = 0 black-url = http://sb.google.com/safebrowsing/update?client=api&apikey=ABQIAAAAJmX7OrvGHaY_K5aehGqz5BRV_RVr3hQ1O0b_lkPpH_yKwLn0_Q&version=goog-black-hash:1:-1 malware-url = http://sb.google.com/safebrowsing/update?client=api&apikey=ABQIAAAAJmX7OrvGHaY_K5aehGqz5BRV_RVr3hQ1O0b_lkPpH_yKwLn0_Q&version=goog-malware-hash:1:-1

alexott commented 13 years ago

in the black-url & malware-url you need to specify URL of your pages that will display notice to user... For example, on some of your internal servers, that is accessible for all users

api key should be specified in key setting, and corresponding URLs are generated automatically

I'm closing it, because this is not a real issue, just a configuration problem

pmjdebruijn commented 13 years ago

Doh, that's a bit embarressing :(

I assumed google had some standard pages for this...

alexott commented 13 years ago

no, it's completely up to you, which pages will shown on blocking...

alexott commented 13 years ago

You can setup some web server (like nginx, or lighttpd) to serve these pages on the same machine where squid is installed