RE: [squid-users] [OT squidguard] Expression list in a source group declaration

From: Rick Matthews <k5wls@dont-contact.us>
Date: Wed, 16 Jul 2003 09:35:08 -0500

> I have send this to this list because it seems to be impossible to be
> subscribed to the squidguard mailing list.

Yes, it looks like the squidGuard mailing list is gone for good.

> Our department are separated not by different domains but with
> computer numbers.

> Some of these group does have different working times and so I must
> setup different source group declarations.

So your controls will be based on the computer being used, not the
person using the computer, right?

I don't know how many workstations you need to handle, but you could
accomplish this using the ip of workstations:

src TEK {
        ip 192.168.44.4
}

src IT {
        ip 192.168.44.1 192.168.44.3 192.168.44.5
}

src DOC {
        ip 192.168.0.1 - 192.168.0.255
}

The specification can be addresses and/or ranges (multiple):

ip xxx.xxx.xxx.xxx [...]
or
ip xxx.xxx.xxx.xxx/nn [...]
or
ip xxx.xxx.xxx.xxx/mmm.mmm.mmm.mmm [...]
or
ip xxx.xxx.xxx.xxx-yyy.yyy.yyy.yyy [...]

where:
xxx.xxx.xxx.xxx is an IP address (host or net, i.e. 10.11.12.13 or
10.11.12.0), /nn a net prefix (i.e. /23),
mmm.mmm.mmm.mmm is a netmask (i.e. 255.255.254.0) and
yyy.yyy.yyy.yyy is a host address (must be >= xxx.xxx.xxx.xxx)

Or, you can specify a file:

IP address/range list (single):
iplist filename

where:
filename is either a path relative to dbhome or an absolute path
(i.e. /full/path) to a file. The iplist file format is simply
addresses and/or networks separated by a newline as above but without
the ip keyword. Thus an iplist for all the private addresses could
look something like (Though the preferred use of "iplist" over "ip"
is for long lists of WS/PC addresses primarily to reduce the size
of the configuration file):
10.0.0.0/8
172.16.0.0/12
192.168.0.0/16

Rick

> -----Original Message-----
> From: rvt@dds.nl [mailto:rvt@dds.nl]
> Sent: Wednesday, July 16, 2003 6:47 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] [OT squidguard] Expression list in a source group
> declaration
>
>
> I have send this to this list because it seems to be impossible to be
> subscribed to the squidguard mailing list...So I'm really sorry for the
> inconvenience....
>
> Dear squidguard friends,
>
> I have a small questrion.
>
> Our department are seperated not by different domains but with computer numbers.
> Let me give you a example:
>
> TEKxxx.int.jongert.nl
> ITxxx.int.jongert.nl
> DOCxxx.int.jongert.nl
>
> ewhere 'xxx' is a number from '000' to '099'
>
> Some of these group does have different working times and so I must setup
> different source group declarations.
>
>
> Is this possible in my situation???
> I wanted to create a expression list for a source group but something like
> this: 'IT...\.int\.jongert\.nl' is not possible.
>
>
> How can I solve my situation without putting the groups in subdomain.
>
> Ries
Received on Wed Jul 16 2003 - 08:35:17 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:18:01 MST