Re: [squid-users] Making ACL for an IP range

Ivan Petrushev wrote:
> Thanks for the comment :)
> >http://squid.visolve.com/squid/squid24s1/access_controls.htm
> >
> >acl aclname src 172.16.1.25-172.16.1.35/32
> >
> >Ryan Lamberton
> >FamiLink Company
> >Family Safe Internet Access
> That's exactly what I need :) In that example what is the purpose of the subnet mask? Does it have to match the subnet mask configured on the PCs over the network? Or it is only for determing the IP range parameters?
>

For determining the IP range squid lets through. It doesn't have to
match the clients subnet.

Eg, I have a network of 10.0.0.0/16

Within that, there are VLAN's of 10.0.0.0/24, 10.0.1.0/24, etc

In squid, I just do

acl office_all 10.0.0.0/255.255.0.0

and then

acl office0 10.0.0.0/255.255.255.0
acl office1 10.0.1.0/255.255.255.0

etc
Received on Tue May 10 2005 - 02:20:09 MDT