/etc/c-icap/srv_url_check.conf is in libc-icap-mod-urlcheck 1:0.3.2-2+b1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 | #
# To enable url_check service in c-icap, copy this file in c-icap
# configuration directory and add the following line at the end of
# c-icap.conf file:
# Include srv_url_check.conf
#
# Module: srv_url_check
# Description:
# This is an URL blacklist/whitelist icap service
# This module add the following log formating codes for use with
# the LogFormat configuration parameter:
# %{url_check:matched_cat}Sa Print all matched url categories
# %{url_check:action}Sa The service decision for requested url:
# MATCHED, BLOCKED or ALLOWED
# %{url_check:action_cat}Sa Print the categories for which the
# decision taken
# Example:
# LogFormat myUrlCheck "%tl, %>a %im %is %huo [MatchedCat: %{url_check:matched_cat}Sa] [Action4cat: %{url_check:action_cat}Sa] [Action: %{url_check:action}Sa]"
# acl URLCHECK service srv_url_check
# AccessLog /var/log/c-icap-access-url_check.log myUrlCheck URLCHECK
#
# The following additional formatting codes can be used with the
# service template "DENY":
# %UU The HTTP url
# %UH The HTTP host
# %UM The matched Categories
# %UB The blocked category
# %UD The description of the blocked category
# Example:
# Service url_check_module srv_url_check.so
Service url_check_module srv_url_check.so
# TAG: url_check.EarlyResponses
# Format: url_check.EarlyResponses on|off
# Description:
# Set it to off if your ICAP client does not support early responses.
# Should not required to touch this parameter.
# Default:
# url_check.EarlyResponses on
# Example:
# url_check.EarlyResponses off
# TAG: url_check.LookupTableDB
# Format: url_check.LookupTableDB DBName type lookup_table_path [Description]
# Description:
# DBName is a a name for this database
# type can be one of the following:
# host: defines a hostnames database. Matches if the hostname
# exist in ths database.
#
# url: defines a URL's database. Matches if a part of the
# http url exist in this database. WARNING: The url arguments
# are not included in search
# For example the www.site.com/to/path/page.html?arg1&arg2
# matches if any of the following exist in this database:
# www.site.com/to/path/page.html
# www.site.com/to/path/
# www.site.com/to/
# www.site.com/
# site.com/to/path/page.html
# site.com/to/path/
# site.com/to/
# site.com/
# com/to/path/page.html
# com/to/path/
# com/to/
# com/www.site.com/to/path/page.html
# www.site.com/to/path/
# www.site.com/to/
# www.site.com/
# site.com/to/path/page.html
# site.com/to/path/
# site.com/to/
# site.com/
# com/to/path/page.html
# com/to/path/
# com/to/
# com/
#
# full_url: it defines a URL's database. This type of url databases
# includes url arguments while searching in the database.
# It does the same checks with the "url" databases plus
# the checks including the arguments:
# www.site.com/to/path/page.html?arg1&arg2
# site.com/to/path/page.html?arg1&arg2
# com/to/path/page.html?arg1&arg2
#
# url_simple_check: it defines a URL's database. In this type of url
# databases only one query with full url performed.
#
# domain: defines a domain names database. Matches if http
# server hostname belongs to a domain which exists
# in this database.
#
# lookup_table_path is a lookup table definition which contains
# keys of the defined type
#
# Optionally a description can be added, which will be displayed when this
# database matches.
#
# Default:
# None set
# Example:
# url_check.LookupTableDB denyhosts host hash:/usr/local/c-icap/etc/denyhosts.txt "Denied Hosts"
# url_check.LookupTableDB multisurbl domain dnsbl:multi.surbl.org
# TAG: url_check.LoadSquidGuardDB
# Format: url_check.LoadSquidGuardDB DBName SquidGuardDBPath [Description]
# Description:
# Defines a squidGuard database. A such database normaly contains
# one domain and one urls database, and checked with the same way
# the squidGuard use it.
# DBName is the database name
# SquidGuardDBPath is the path of the database.
#
# Optionally a description can be added, which will be displayed when this
# database matches.
# Default:
# None set
# Example:
# url_check.LoadSquidGuardDB porn /usr/local/blacklists-toulouse/porn/ "SquidGuard Porn Sites"
# TAG: url_check.Profile
# Format: url_check.Profile ProfileName pass|block DBName[{subcat1, subcat2, ...}]|ALL
# Description:
# It is used to define policy profiles. The use of "default" as
# ProfileName is reserved and defines a default policy for all
# requests for which no profile defined
# Default:
# None set
# Example:
# url_check.Profile BlockPorn block porn
# url_check.Profile default block multisurbl{127.0.0.126}
# url_check.Profile default pass ALL
url_check.Profile default pass ALL
# TAG: url_check.ProfileAccess
# Format: url_check.ProfileAccess ProfileName [!]acl1 ...
# Description:
# It is used to select policy profile to apply based on acls
# Default:
# None set
# Example:
# acl Foo group foo
# url_check.ProfileAccess BlockPorn Foo
# End module: srv_url_check
|