3.4. Configuring a domain deny list in Squid

Procedure

1. Edit the /etc/squid/squid.conf file and add the following settings:

   acl domain_deny_list dstdomain "/etc/squid/domain_deny_list.txt"
   http_access deny all domain_deny_list

   重要

   Add these entries before the first http_access allow statement that allows access to users or clients.

2. Create the /etc/squid/domain_deny_list.txt file and add the domains you want to block. For example, to block access to example.com including subdomains and to block example.net, add:

   .example.com
   example.net

   重要

   If you referred to the /etc/squid/domain_deny_list.txt file in the squid configuration, this file must not be empty. If the file is empty, Squid fails to start.

3. Restart the squid service:

   # systemctl restart squid