Re: about access control

At 08:33 AM 11/2/99 +0800, you wrote:
acl dstf1 dst 61.128.128.0/255.255.128.0 61.132.0.0/255.255.128.0
137.189.0.0/255.255.0.0 143.89.0.0/255.255.0.0
     144.214.0.0/255.255.0.0 203.84.63.0/255.255.255.0
203.87.224.0/255.255.224.0 203.88.0.0/255.255.252.0
     203.89.0.0/255.255.252.0 203.90.0.0/255.255.252.0
202.127.12.0/255.255.236.0
acl dstf2 dst 147.8.0.0/255.255.0.0 158.132.0.0/255.255.0.0
158.182.0.0/255.255.0.0 159.226.0.0/255.255.0.0
     161.64.0.0/255.255.0.0 161.207.0.0/255.255.0.0 203.93.0.0/255.255.64.0
203.93.192.0/255.255.255.0 203.95.0.0/255.255.248.0
     203.196.0.0/255.255.252.0 210.72.0.0/255.255.128.0 202.119.0.0/255.255.0.0
acl dstip dst 0.0.0.0/0.0.0.0
..
http_access allow dstf1 dstf2
http_access deny dstip
..

  but the access list seems not worked correctly (for example the
202.119.80.12 could not be retrieved because of Access Denied.) when the
client use the proxy. I can not know how to solve it. Would you help me
check our errors? thank you!

A couple of things I'd suggest (and being new to squid myself, I might be
completely wrong).

- try two "http_access allow" lines, one for dstf1 and one for dstf2

- add the specific subnet for 202.119.80.12 to the second acl entry, ie
202.119.80.0/255.255.0.0

Good luck,
Tim

--
Tim Villa, Network / Systems Administrator
Faculties of Economics & Commerce, Education and Law
The University of Western Australia
Phone: +61-8-9380-1796, Fax: +61-8-9380-1068
Mail <mailto:tim.villa@uwa.edu.au> WWW <http://buck.ecel.uwa.edu.au/>