Re: [squid-users] deny authenticated users to dstdomain

On Thu, Sep 01, 2005 at 11:14:16AM -0400, Covington, Chris wrote:
> I'd like to deny some domains after people have authenticated. I tried
> this:
>
> acl NoAccess dstdomain .aim.com
> acl NoAccess proxy_auth REQUIRED
> acl AuthorizedUsers proxy_auth REQUIRED
> http_access deny NoAccess
> http_access allow AuthorizedUsers

Untested proposal (yeah, I'm lazy):

acl authentication proxy_auth REQUIRED
acl forbidden_domains dstdomain .aim.com
http_access deny !proxy_auth
http_access deny forbidden_domains
http_access allow all

Or even shorter:
[...]
http_access deny !proxy_auth
http_access allow !forbidden_domains

Regards
 Christoph

-- 
~
~
~
".signature" [Modified] 3 lines --100%--                3,41         All