Re: [squid-users] access control issues

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 13 Jan 2006 12:51:34 +0100 (CET)

On Thu, 12 Jan 2006, Dustin wrote:

>> Yes, that is what I'd like to accomplish, limit the sites which this
>> group 'de_InetAllow' can access.

Then you need to make sure you do not allow them (de_InetAllow) access
anywhere else..

>> acl localnet proxy_auth REQUIRED
>> acl de_urls dstdomain .fedex.com .ups.com
>> acl de_InetAllow external win_domain_group Web_access_dataentry
>> http_access allow de_InetAllow de_urls
>> acl Full_InetAllow external win_domain_group Web_access_full
>> http_access allow Full_InetAllow

The above rules only gives access, it does not restrict access. Only deny
lines restricts access..

Regards
Henrik
Received on Fri Jan 13 2006 - 04:51:40 MST

This archive was generated by hypermail pre-2.1.9 : Wed Feb 01 2006 - 12:00:01 MST