Re: Squid Access Controls

From: Andrew Kemp <andrew@dont-contact.us>
Date: Fri, 23 Aug 1996 13:22:19 +1000 (GMT+1000)

Greetings Everyone,

Further to Duane's suggestion in archive message 914 regarding
restricting a host from a domain through acl's, I have a requirement
here at the University in which I work to restrict PC Labs
from certain domains.

To recap what Duane said :

acl host1 src 192.108.125.10/255.255.255.255
acl domfoo domain foo.com

http_access deny host1 domfoo
http_access allow all

Well, I tried something similar to the above and it didn't work.
Can anyone tell me what I did wrong :

acl uni src 136.186.0.0/255.255.0.0
acl pc src 136.186.71.243/255.255.255.0

acl block01 domain playboy.com

http_access deny pc block01
http_access allow uni

I restarted squid after making the change and I can quite happily access
www.playboy.com (and variants) from my PC. Obviously, in the above example,
pc will eventually be replaced with the subnet of the lab.

Please let me know where I am going wrong. Thanks.

Regards,

Andrew Kemp

Unix Systems Administrator Phone : 61 +3 9214-8252
Computer Services and Information Techology Fax : 61 +3 9214-8944
Swinburne University of Technology E-Mail: andrew@swin.EDU.AU
Hawthorn, Victoria, Australia 3122 URL: http://opax.swin.edu.au/andrew
Received on Thu Aug 22 1996 - 20:24:38 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:32:50 MST