Re: [squid-users] ACL access fault

Using /255.255.255.255 (or /32) as mask in a IP specification is fine,
and actually required if the IP ends with with .0.

mask and address are completely different things. There are no way a
mask can be a broadcast address, even if they look the same.

--
Henrik Nordstrom
Squid Hacker
Naeem wrote:
> 
> > It seems that users on our network who hve been banned from using the net
> > can still access cached pages.
> > The ACL's used are as follows:
> >
> > acl banned.students src 192.168.1.109/255.255.255.255
> >
> 
> Is '192.168.1.109' a single host you are trying to ban ? if yes then write
> something like
> acl banned_students src 192.168.1.109 (without subnet mask)
> 
> and if you want to ban a range of IP addresses then write your correct
> subnet address with correct subnet mask not '255.255.255.255' this is not a
> subnet mask but a broadcast address.
> 
> Check your 'http_access' rules order as well.
> 
> /n