{
my @blocked = split(/[;,]/, ($squidguard{'BlockedCategories'} || ''));
my $redirect = $squidguard{'RedirectUrl'} ||
               "http://$SystemName.$DomainName/squidGuard/".
               'cgi-bin/blocked.cgi?clientaddr=%a&clientname=%n'.
               '&clientuser=%i&clientgroup=%s&targetgroup=%t&url=%u';

my $deny = 'white !black';
$deny .= " !$_" foreach (@blocked);
$deny .= " !in-addr" if (($squidguard{'DenyIP'} || 'disabled') eq 'enabled');
$OUT .=<<"EOF";
	default {
		pass $deny any
		redirect $redirect
	}
EOF
}
