Re: [squid-users] TCP_DENIED on youtube

Stefan Jensen wrote:
> Hi,...
>
> i got some TCP_DENIED on youtube.com:
>
> "TCP_DENIED/403 3446 GET http://googleads.g.doubleclick.net/pagead/ads?
> - NONE/- text/html"
>
> It is an embedded ad page on youtube in the upper right. (e.g:
> http://www.youtube.com/browse)
>
> I have this in my squid.conf:
>
> acl blockfiles urlpath_regex -i "/etc/squid/blockfiles.acl"
> http_access deny blockfiles
>
> $ cat /etc/squid/blockfiles.acl
>
> .com$
> .exe$
> .vb$
> .vbs$
> .vbe$
> .cmd$
> .bat$
> .ws$
> .wsf$
> .scr$
> .shs$
> .pif$
> .hta$
> .jar$
> .jse$
> .lnk$
> .rar$
> .zip$
> .tar$
> .tar.gz$
> .gz$
> .tgz$
> .Z$
> .torrent$
>
> Why is squid blocking this? I've no idea. Please can anyone give me a
> hint? When i comment out the "acl blockfiles" lines, it worked, so i
> think no other rule or redirector is involved:
>
> "TCP_MISS/200 2052 GET http://googleads.g.doubleclick.net/pagead/ads? -
> DIRECT/74.125.77.157 text/html"
>
> I'm using "squid-3.0.STABLE13-1.fc10.x86_64"
>
> best regards
>
> Stefan

Because there is a part of the URL-path following the ? which is
included in the match.

In this case I believe its probably the advert site including the domain
name as its last query-string option: ... "/ads?referer=example.com"

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
   Current Beta Squid 3.1.0.6