Re: selective deny access

On Sep 13, meg@iligan.com wrote:

> I know that squid can be configured to block access to some
> sites, but what i want is to block certain machines only:
>
> e.g.
> "Machine A" can access "this site" but not "that site"
> "Machine B" can access "any site"
> ....
> ....
> so on an so forth

Combine the "src" and "dst" ACL types:

    acl machine_a src 1.2.3.4/255.255.255.255
    acl machine_b src 5.6.7.8/255.255.255.255
    acl this_site dst 9.10.11.12/255.255.255.255
    acl that_site dst 13.14.15.16/255.255.255.255
    acl any_site dst 0.0.0.0/0.0.0.0

    http_access allow machine_a this_site
    http_access deny machine_a that_site
    http_access allow machine_b any_site

-- 
Michael Fuhr
http://www.dimensional.com/~mfuhr/