Re: [SQU] acl allow and deny, is it order dependent?

From: Ilja Pavkovic <illsen@dont-contact.us>
Date: Tue, 17 Oct 2000 23:16:34 +0200

Hi

> >> Can anyone explain the order/precedence of allow and deny.
> >
> >they are evaluated top-down: the first match in the configuration file
> >will be used to determine the reaction - allow or deny - of squid.
> >
>
> So if a deny time was done from 08:00-16:30 and an allow time was done
> from 12:00-13:30 then access would be allowed at the allow time?

depends on the order:

  acl time1 08:00-16:30... (dont know the correct syntax :))
  acl time1 12:00-13:00...

- first situation:
  http_access deny time1
  http_access allow time2

Assume, it is 12:30. Then the first rule with time1 will match, so it will
be denied.

- second situation:
  http_access allow time2
  http_access deny time1

Assume, it is 12:30. Then the first rule with time2 will match, so it will
be allowed.

Ilja Pavkovic

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Tue Oct 17 2000 - 15:17:34 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:55:46 MST