Re: [SQU] Multi Time ACL

From: Leonardo Rodrigues <coelho@dont-contact.us>
Date: Fri, 02 Mar 2001 17:21:20 -0300

At 19:44 02/03/01 +0100, Henrik Nordstrom wrote:
>The syntax looks alright.

         Henrik, ACLs are really OK. But isn't this http_access logically
wrong ( syntax is OK, but logic is faulty ) ?? Let's analise it ..

>acl abc src 172.161.163.85
>acl xyz src 172.161.163.86
>acl asd src 172.161.163.87
>acl morning time 06:00-11:00
>acl lunch time 14:00-14:30
>acl evening time 16:25-23:59
>
>http_access allow abc morning
>----> http_access allow xyz morning lunch
>http_access allow asd lunch

         Look the second http_access line ... its :

         http_access allow xyz AND morning AND lunch

         this will NEVER be matched, because at any given time, morning AND
lunch ACL will never be matched, so statement will ALWAYS be false !!

         Another think that we should consider ..... is there a
'http_access deny all' anywhere on the squid.conf file ???

         Hope hearing from you soon,
         Leonardo Rodrigues

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Fri Mar 02 2001 - 13:26:07 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:28 MST