Bloquear Downloads no Squid

Pessoal, estou com problemas para bloquear download pelo squid, estou usando o Centos 6.6 e squid 3.1.23.

Squid.conf:
------------------------------------------------------------------------------------------------------------------
## Autenticação ##

## Meus controles de acesso ##
#acl usuarios proxy_auth required
acl blockdownload urlpath_regex -i "/etc/squid/blockdownload.acl"
####
## HTTP_ACCESS ##
http_access deny blockdownload
#http_access allow usuarios
###
http_access allow localhost
http_access allow all

## Configuração gerais
# Squid normally listens to port 3128
http_port 3128

# Uncomment and adjust the following to add a disk cache directory.
cache_dir ufs /var/spool/squid 300 16 256
access_log /var/log/squid/access.log squid
visible_hostname localhost

# Caminho de onde aparecem as mensagens dos usuários
# error_directory /usr/shared/squid/errors/pt-br

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
-----------------------------------------------------------------------------------------
Arquivo blockdownload.acl:

\.mp3$
.mp3$
\.mp3(\?.*)?$
^.*.mp3$
($.mp3)
-----------------------------------
Coloquei vários tipos no arquivo blockdownload.acl para realizar alguns testes mas em nenhum caso funcionou.

Estou bloqueando antes de liberar, utilizei os dois métodos e não deu certo.

Bom dia amigo, pode postar seu squid.conf completo para verificarmos ?

Squid completo:

# Recommended minimum configuration:
#
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src ***.**.*.*/** # RFC1918 possible internal network
acl localnet src ***.***.*.*/** # RFC1918 possible internal network
acl localnet src fc00::/7 # RFC 4193 local private network range
acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines

acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

## Autenticação ##

## Meus controles de acesso ##
#acl usuarios proxy_auth required
acl blockdownload url_regex -i "/etc/squid/blockdownload.acl"
####
## HTTP_ACCESS ##
http_access deny blockdownload
#http_access allow usuarios
###
http_access allow localhost
http_access allow all
## Configuração gerais
# Squid normally listens to port 3128
http_port 3128

# Uncomment and adjust the following to add a disk cache directory.
cache_dir ufs /var/spool/squid 300 16 256
access_log /var/log/squid/access.log squid
visible_hostname localhost

# Caminho de onde aparecem as mensagens dos usuários
# error_directory /usr/shared/squid/errors/pt-br

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

Está testando com download http ou https?

Downloads

No arquivo "/etc/squid/blockdownload.acl" está assim:

\.mp3
\.exe
\.avi
\.torrent
\.vma
\.zip
\.rar
\.mpeg
\.iso

Você deve esta conseguindo fazer download pelo https com certeza.

Seu servidor squid esta realmente ativo ? Executa o comando para verificar se o arquivo de configuração esta ok e posta a saída aqui para nós.

$ sudo squid3 -k parse

OU
$ sudo squid -k parse

Download https

[root@LX-CAM-PX03 ~]# sudo squid -k parse
2017/11/21 13:46:59| Processing Configuration File: /etc/squid/squid.conf (depth 0)
2017/11/21 13:46:59| Processing: acl manager proto cache_object
2017/11/21 13:46:59| Processing: acl localhost src 127.0.0.1/32 ::1
2017/11/21 13:46:59| Processing: acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
2017/11/21 13:46:59| Processing: acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
2017/11/21 13:46:59| Processing: acl localnet src ***.**.0.0/** # RFC1918 possible internal network
2017/11/21 13:46:59| Processing: acl localnet src ***.***.0.0/** # RFC1918 possible internal network
2017/11/21 13:46:59| Processing: acl localnet src fc00::/7 # RFC 4193 local private network range
2017/11/21 13:46:59| Processing: acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines
2017/11/21 13:46:59| Processing: acl SSL_ports port 443
2017/11/21 13:46:59| Processing: acl Safe_ports port 80 # http
2017/11/21 13:46:59| Processing: acl Safe_ports port 21 # ftp
2017/11/21 13:46:59| Processing: acl Safe_ports port 443 # https
2017/11/21 13:46:59| Processing: acl Safe_ports port 70 # gopher
2017/11/21 13:46:59| Processing: acl Safe_ports port 210 # wais
2017/11/21 13:46:59| Processing: acl Safe_ports port 1025-65535 # unregistered ports
2017/11/21 13:46:59| Processing: acl Safe_ports port 280 # http-mgmt
2017/11/21 13:46:59| Processing: acl Safe_ports port 488 # gss-http
2017/11/21 13:46:59| Processing: acl Safe_ports port 591 # filemaker
2017/11/21 13:46:59| Processing: acl Safe_ports port 777 # multiling http
2017/11/21 13:46:59| Processing: acl CONNECT method CONNECT
2017/11/21 13:46:59| Processing: acl blockdownload url_regex -i "/etc/squid/blockdownload.acl"
2017/11/21 13:46:59| Processing: http_access deny blockdownload
2017/11/21 13:46:59| Processing: http_access allow localhost
2017/11/21 13:46:59| Processing: http_access allow all
2017/11/21 13:46:59| Processing: http_port 3128
2017/11/21 13:46:59| Processing: cache_dir ufs /var/spool/squid 300 16 256
2017/11/21 13:46:59| Processing: access_log /var/log/squid/access.log squid
2017/11/21 13:46:59| Processing: visible_hostname localhost
2017/11/21 13:46:59| Processing: coredump_dir /var/spool/squid
2017/11/21 13:46:59| Processing: refresh_pattern ^ftp: 1440 20% 10080
2017/11/21 13:46:59| Processing: refresh_pattern ^gopher: 1440 0% 1440
2017/11/21 13:46:59| Processing: refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
2017/11/21 13:46:59| Processing: refresh_pattern . 0 20% 4320
2017/11/21 13:46:59| Initializing https proxy context

[root@LX-CAM-PX03 ~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination