Re: Deny any IP

Roman wrote:
>
> Hello Squid-users,
>
> I have FreeBSD 2.2.6 and Squid 2.1 patch2.
> In squid.conf I have:
> acl localhost src 192.168.170.1-192.168.170.2/255.255.255.255 \
> 192.168.170.5-192.168.170.20/255.255.255.255
> acl us_era src 192.168.170.3-192.168.170.4/255.255.255.255
> acl all src 0.0.0.0/0.0.0.0
>
> http_access deny manager !localhost
> http_access allow localhost
> http_access allow us_era
>
> How can I deny access for "us_era" to www.mail.ru ?

acl www.mail.ru dstdomain www.mail.ru
...

http_access deny manager !localhost
http_access allow localhost
http_access deny us_era www.mail.ru
http_access allow us_era

Note: Your use of localhost is not the intended use. The intended use is
to only have the 127.0.0.1 (localhost) in that ACL, and define other
ACL's for other hosts (like local-net).

--
Henrik Nordstrom
Spare time Squid hacker