Re: ACL restrict users to domains from file... and even more

Mark Seuffert (Pirates) wrote:

> With help of the squid-documentation and older postings.... I guess this
> is okay:
>
> acl specialhosts src 192.168.2.0/255.255.255.0
> acl localhosts src 192.168.1.0/255.255.255.0
> acl employee dstdomain "/etc/allowed.domains"
> acl all src 0.0.0.0/0.0.0.0
> http_access allow specialhosts
> http_access allow localhosts employee
> http_access deny all

> Hmmm, does this work or is there a better way to achive this?

Looks ok.

> How can I specify allowed subdomains or only allowed URL from a domain
> (for example www.playcom.com/jokes_about_nurses.html)?

subdomains are matched dstdomain acl looking for the subdomain..

URLs are matched using the url_regex acl.

acl jokes url_regex -i ^http://www.playcom.com/jokes_about_nurses.html$

---
Henrik Nordstrom
Spare time Squid hacker