Re: ACL question.

From: David Richards <dj.richards@dont-contact.us>
Date: Tue, 27 Oct 1998 11:09:59 +1000 (EST)

Dave,

        Like so:

acl ibm url_regex ^http://www.ibm.com
acl terminal1 src 123.123.123.123/32

http_access deny terminal1 !ibm
http_access allow all

That will do the trick. Just replace www.ibm.com with the site you want
them to access and 123.123.123.123 with the correct IP.

Dave.

-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-
David Richards
Network Programmer
Internetworking Software Services, Computing Services
Queensland University of Technology
Level 12, 126 Margaret Street
Brisbane QLD 4001, Australia
E-mail: dj.richards@qut.edu.au
Ph: +61 7 3864 4347 Fax: +61 7 3864 5272
-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-

On Mon, 26 Oct 1998, Dave A. Flanigan wrote:

>
> I have looked and looked but cannot seem to find a good answer.
>
> Is it possible to build an acl that allows specific IPs to access only
> specific sites, but allows all other IPs to access any site?
>
> All of our users have to use the proxy to get to the Internet.
>
> We have a few terminals that should only be able to access one specific
> web page out on the Internet, but the rest of the terminals should be
> unrestricted. I have sample acls that will limit everyone to that page, or
> limit those people to nothing, but not both sides of the equation.
>
> Anyone have any idea how I could do this? Example please?
>
>
>
Received on Mon Oct 26 1998 - 17:53:27 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:42:49 MST