Re: ACL

On Wed, 11 Feb 1998, Andy Ma wrote:

Imagine you want to deny access to a list of sites,
but only for a few sites maybe during businesshours:

Example1: No Chat-Servers for doers Monday to Friday , 7:00am-> 8:00pm

acl businesshours time MTWHF 7:00-20:00

acl chaturl urlpath_regex \/chat\/ \/Chat\/
# Any URL, that contains one of the regexps will match

acl doers src 192.174.65.0/255.255.255.0 193.171.255.0/255.255.255.255

http_access deny chaturl buerostunden doers
# you have to deny the chaturls to the doers before you say something
# like http_access allow all , cause the first Rule found by squid
# does the job.

Example2: No Sex for doers, any time

acl sex url_regex "/acls/sex.acl"
# this points squid to the file where the forbidden Servers are
# listed. One URL per line
# Looks like: ^http://www.playboy.com
#
acl doers src 192.174.65.0/255.255.255.0 193.171.255.0/255.255.255.0
 
http_access deny sex doers
http_access allow all
# you have to deny sex to the doers before you say something
# like http_access allow all , cause the first Rule found by squid
# does the job.

Works here with other Urls, though we don't have a problem
with playboy :-)

HTH, Woifi.

> Hello,
>
> I was wondering if there is a way to set the proxy deny a particular IP
> to access a particular site (ex . www.playboy.com)?
> Also, it is possible to change the message reply from the proxy that
> said "Access Denied"?
>
> Regards,
> Andy
>
>
Received on Wed Mar 04 1998 - 08:31:15 MST