Re: [squid-users] HTTP Accellerator

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Mon, 19 Mar 2001 20:06:50 +0100

### Local Access lists ###

# local accelerated domains
# (can also use dst ACL type to list the server addresses
# instead of domains)
acl localsites dstdomain ....

# management servers that can host cachemgr.cgi or use client
# to access cachemgr info/statistics
acl management_servers src 127.0.0.1 ...

### END of local access lists ###

# Other useful definitions (static)
acl all src 0.0.0.0/0
acl http proto http
acl port80 port 80
acl cachemgr proto cache_object

# Allow world access to localsites
http_access allow localsites http port80
# Allow magagement servers access to cachemgr
http_access allow cachemgr management_servers
# Deny all else
http_access deny all

--
Henrik Nordstrom
Squid hacker
Harald Scharf wrote:
> 
> Hello to all,
> 
> Im running Squid Version 2.3.STABLE2 as an http accellerator and a proxy
> server.
> The redirector works well with a simple perl script, but i have big
> problems,
> to tell squid, that he should only answer query for local domains.
> The Probelm is :
> Everybody in the world can enter a simple proxy setting for :
> www.mydomain.com:80
> and the accellerator friendly makes this requets for the remote client.
> I tried some acls like :
> 
> acl localsites dstdomain myfirstdomain.com myseconddomain.com ...
> acl clients src 0.0.0.0/0.0.0.0
> acl otherdsites 0.0.0.0/0.0.0.0
> http_access allow localsites
> http_access allow clients
> http_access deny othersites
> 
> With this rules i could not obtain, that squid only serves for his local
> domains.
> 
> heeeeelp, please....
> 
> thx
> Harald Scharf
Received on Mon Mar 19 2001 - 14:25:32 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:43 MST