Re: [squid-users] Squid acls

From: Gerard Eviston <geviston@dont-contact.us>
Date: Wed, 4 Dec 2002 22:41:34 +1000

On Wed, 4 Dec 2002 22:32, Guilherme Goes wrote:
> I have the following acls in my squid.conf
>
> acl all src 0/0
> acl ips_diretoria src 10.1.0.1 10.1.0.2
> acl allowed_sites dstdomain microsoft.com
> acl allowed_ips dst 200.180.4.168
> acl matutino time MTWHF 08:00-12:00
> acl vespertino time MTWHF 14:00-18:00
>
> http_access allow ips_diretoria
> http_access allow matutino allowed_sites
> http_access allow matutino allowed_ips
> http_access allow vespertino allowed_sites
> http_access allow vespertino allowed_ips
> http_access allow !matutino
> http_access allow !vespertino
> http_access deny all
>
> But this don't seem to be working , the sites that are different than
> microsoft.com are not blocked by squid . Squid is running on FreeBSD 4.6
> , and is version 2.5 , the clients are runnig IE 5.5 / 6.0 .
>

I think you'll need

http_access allow !matutino !verpertino

instead of individual lines for each. This way access will be granted only
when the acls are simultaneously untrue (during lunchtime).

Regards
Gerard

> Guilherme Loch Waltrick Góes
> www.voffice.com.br
Received on Wed Dec 04 2002 - 05:46:17 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:11:50 MST