Re: acl question

From: Edwin Culp <eculp@dont-contact.us>
Date: Tue, 07 Jul 1998 14:26:52 -0500

A.R. Cache Op wrote:
>
> I wanted to ban 1 IP address from using a particular squid 1.1.20
>
Maybe
acl all src 0.0.0.0 0.0.0.0/0.0.0.0
> acl arlocal src 203.18.148.0/255.255.255.0 <--- class C
> acl kozak src 203.18.148.187/255.255.255.255 <--- IP I want to ban
>
http_access deny kozak
http_access allow all
or
http_access allow arlocal
http_access deny all

Would seem to be a simple solution depending on who you want in, just
your
class c or everyone except kozak.

ed
> http_access allow arlocal
> http_access deny !arlocal kozak
>
> miss_access allow arlocal
> miss_access deny !arlocal kozak
>
> In theory that should block this person out ?
>
> Don't know if it does or not, but it seems to let everyone else
> in!
>
> Did I make a major goof or is this a bug ? I just caught
> someone from an outside IP accessing the squid, if I take the 'kozak' out
> they get dennied.
>
> Thanks,
>
> A.R. Internet, Sydney, Australia. Modem : (02) 9809 0999 Voice 9809-3148
> Internet - SLIP/PPP Accounts $25/$35 a Month or $1.88/$2.50 per hour.
> FULL Internet connection. (ftp, irc, telnet, www). No Setup Fee.
> Web Page http://www.ar.com.au Telnet to the BBS telnet://bbs.ar.com.au
Received on Tue Jul 07 1998 - 13:22:36 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:41:04 MST