Re: [squid-users] Problem's with SSL....help

From: Lieven Marchand <lieven.marchand@dont-contact.us>
Date: 23 Sep 2002 14:04:17 +0200

Jonathan.Laycock@airwair.co.uk writes:

> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl SSL_ports port 443 563
> acl Safe_ports port 80
> acl Safe_ports port 21
> acl Safe_ports port 70
> acl Safe_ports port 210
> acl Safe_ports port 1025-65535
> acl Safe_ports port 280
> acl Safe_ports port 488
> acl Safe_ports port 591
> acl Safe_ports port 777
> acl Safe_ports port 901
> acl purge method PURGE
> acl Login proxy_auth REQUIRED
> acl CONNECT method CONNECT
>
>
> http_access allow manager localhost
> http_access deny manager
> http_access allow localhost
> http_access deny !Safe_ports

Put the SSL_ports in Safe_ports. Here you stop access to 443 and 563.

> http_access deny CONNECT !SSL_ports
> http_access allow Login
> http_access deny all
>
>

-- 
Honest praise, this stony part insisted, was what the bunglers of the world 
heaped on the heads of the barely competent.                -- Stephen King
Received on Mon Sep 23 2002 - 07:14:29 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:10:23 MST