Re: [squid-users] Special access rights to a sub-group of users

On Tue, 16 Mar 2004 fefi@ig.com.br wrote:

> Hello again, Henrik!
>
> acl subgroup src 120.202.200.7
> acl rionet src 120.202.200.0/255.0.0.0
>
> acl morning time SMTWHFA 08:30-12:30
> acl afternoon time SMTWHFA 13:30-18:30
>
> acl denied_ext url_regex \.zip$
> acl denied_ext url_regex \.midi$ \.wav$
> acl denied_ext url_regex \.mpe?ga$ \.mp[23]$ \.m3u$ \.r[am]$ \.r[ap]m$
> acl denied_ext url_regex \.mp[eg]$ \.mpeg$ \.qt$ \.mov$ .avi$
> acl denied_ext url_regex \.exe$ \.com$ \.bin$ \.scr$ \.dll$ \.EXE$ \.Exe$
> acl allowed_ext url_regex hotmail.com$ webmail.exe$ iname.com$
>
> http_access allow subgroup
> http_access allow rionet allowed_ext
> http_access deny rionet denied_ext morning
> http_access deny rionet denied_ext afternoon
> http_access allow rionet
> http_access allow localhost
> http_access deny all
>
> I had no success...... :-(
>
> IP 120.202.200.7 still doesn't have rights to download a .exe file, for
> example.....

I see nothing wrong with the access controls for subgroup above, and from
what can be read in this message it should work. Try "squid -k parse" and
to restart your Squid.

The rionet acl is not correctly defined. The netmask does not match the
address and "squid -k parse" will warn you about this. What you have typed
is identical to "acl rionet src 120.0.0.0/8" and I am not entirely sure
this is what you intended..

Regards
Henrik
Received on Wed Mar 17 2004 - 00:53:24 MST