Re: [SQU] access controls (faq?)

Nathan Kahn wrote:
>
> I know this is a no-brainer for most of you, and an faq, but I'm still
> having a little difficulty figuring out how to allow access to some, yet
> deny others.
>
> If I want to deny access for an expression list "blocklist" (excluding
> "noblocklist"), yet allow one person with an IP# 10.1.2.3 to access
> everything, is the following correct?
>
> http_access allow 10.1.2.3
                    ^^^^^^^^
> acl block url_regex "/usr/local/squid/etc/blocklist"
> acl noblock url_regex "/usr/local/squid/etc/noblocklist"
> http_access deny block !noblock
> http_access all
             ^^^^^
>
> That's right, isn't it?

Apart from the syntax errors yes.

acl full_access src 10.1.2.3
http_access allow full_access
acl block url_regex "/usr/local/squid/etc/blocklist"
acl noblock url_regex "/usr/local/squid/etc/noblocklist"
http_access deny block !noblock
http_access allow all

--
Henrik Nordstrom
Squid hacker
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html