Re: acl - dstdomain - srcdomain

From: Henrik Nordstrom <>
Date: Tue, 20 Apr 1999 16:10:05 +0200

Ratkai Peter wrote:

> I need to have a special access-list for my users. This is a corporate
> netwok, so no .exe .zip .arj files can be downloaded by the users.
> Some http queries use .exe extension in the address, so squid denies
> it as well. Do you know a workaround for this?

Identy those, and exclude them form denial.

acl permitted_exes "/squid/etc/permittedexe.list"
http_access deny !permitted_exes denied_extenstions

> http_access allow minimal_hosts minimal password
> I've tried this, but does not work. the file dstdomain.list contains the
> allowed url's, and the srcdomain.list.minimal contains the domain names
> associated with this group. I may do something wrong.

It should work. I think.

If you turn on debugging then it is very easy to see how your ACL's are
processed and where it goes wrong (preferably done on a non-production
server with no other traffic at the time).

Henrik Nordstrom
Spare time Squid hacker
Received on Tue Apr 20 1999 - 08:32:17 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:45:53 MST