Marc Elsen wrote:
>
> Hiu Yen Onn wrote:
> >
> > if i wish to have a completely open squid, then, what would be the
> > acl look like?
> > Is it like such below
> >
> > acl all 0.0.0.0/0.0.0.0
>
> combined with 'http_access allow all'
>
> That should make squid 'wide open'.
>
> But don't do this, it makes your squid possibly usable
> by anyone on the Internet.
>
> Take this as a testing stage to see whether squid works,
> in a production stage proper restrictions should be acl-defined
> limiting access to the known intranet network(s).
Even then proper acls should be used to only give access to the networks
(or destinations if an accelerator) which should be allowed to be use
the proxy.
Regards
Henrik
Received on Thu Mar 20 2003 - 01:16:14 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:14:10 MST