Project

General

Profile

Actions

Feature #10434

closed

Squid whitelist/blacklist with IDN hostnames

Added by Viktor Gurov over 4 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Category:
Squid
Target version:
-
Start date:
04/05/2020
Due date:
% Done:

100%

Estimated time:
Plus Target Version:

Description

Squid doesn't block non-ascii domans
non-ascii domains must first be converted to punycode:
https://unix.stackexchange.com/questions/82146/squid-doesnt-block-non-ascii-domans?rq=1

Actions #2

Updated by Jim Pingle over 4 years ago

  • Status changed from New to Pull Request Review
Actions #3

Updated by Renato Botelho over 4 years ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Renato Botelho
  • % Done changed from 0 to 100

PR has been merged. Thanks!

Actions #4

Updated by Viktor Gurov over 4 years ago

Use idn_to_ascii() only for ACL
Otherwise sq_text_area_decode() create incorrect files (i.e. crt or key files)

Fix:
https://github.com/pfsense/FreeBSD-ports/pull/836

Actions #5

Updated by Jim Pingle over 4 years ago

  • Status changed from Feedback to Pull Request Review
Actions #6

Updated by Viktor Gurov over 4 years ago

  • Status changed from Pull Request Review to Resolved

squid pkg 0.4.44_21 works as expected

Actions

Also available in: Atom PDF