Re: [squid-users] Two-Three ACL combination syntax.

On Monday 04 August 2003 11:18 am, ads squid wrote:

> I have received as suggested
>
> acl QUERY urlpath_regex cgi-bin \?
> acl Safe_ports port 80 443 210 119 70 20 21 1025-65535
> http_access deny !Safe_ports
> acl STOP1 src 192.168.0.42
> acl WORKING time MTWHF 09:30-17:00
> acl SITE dstdomain www.yahoo.com
> http_access deny STOP1 WORKING SITE
> acl CONNECT method CONNECT
> acl all src 0.0.0.0/0.0.0.0
> acl losers src 192.168.0.0/255.255.255.0
> acl 4CONN maxconn 4
> http_access deny 4CONN losers
> acl magic_words2 url_regex -i .mpeg .mpe .mpg .wav
> .mov
> acl day time MTWHF 07:00-23:00
> http_access deny CONNECT
> acl localnet src 192.168.0.0/255.255.255.0
> acl localhost src 127.0.0.1/255.255.255.255
> http_access allow localnet
> http_access allow localhost
> http_access deny all
> acl magic_words1 dst 192.168.0.0/255.255.255.0
>
> It has stop access of all users.

"losers" are defined as src 192.168.0.0/255.255.255.0
"localnet" is defined as src 192.168.0.0/255.255.255.0

losers are denied access, then later on you say localnet is allowed access.

Who do you want to have access and who do you want to block?

Antony.

-- 
Abandon hope, all ye who enter here.
You'll feel much better about things once you do.