Re: [squid-users] Restricting Access to certain sites only

From: Odhiambo WASHINGTON <odhiambo.raburu@dont-contact.us>
Date: Sun, 5 Mar 2006 11:57:08 +0300

* On 05/03/06 09:36 +0100, Henrik Nordstrom wrote:
> sön 2006-03-05 klockan 11:07 +0300 skrev Odhiambo WASHINGTON:
>
> > acl walled_class src 172.16.0.0/24
> > acl AllowedSites dstdomain "/usr/local/etc/squid/allowed-sites"
> > http_access allow walled_class AllowedSites
> > http_access deny walled_class !AllowedSites
> >
> >
> > Is this any closer to what I'd like to achieve?
>
> Should work.
>
> But you may want to simplify the last line to just
>
> http_access deny walled_class
>
> as this makes it more sane to extend/modify their "allow" rules later on
> as additional criterias come up.. for example you may want to add a
> referer_regex to allow downloads of banners etc linked from those
> sites..

Thank you so much for all the advise. This appears to work in my test
env. The main job of integrating it within the walled-garden concept
itself now remains, which shouldn't be difficult.

-Wash

http://www.netmeister.org/news/learn2quote.html

DISCLAIMER: See http://www.wananchi.com/bms/terms.php

--
+======================================================================+
    |\      _,,,---,,_     | Odhiambo Washington    <wash@wananchi.com>
Zzz /,`.-'`'    -.  ;-;;,_ | Wananchi Online Ltd.   www.wananchi.com
   |,4-  ) )-,_. ,\ (  `'-'| Tel: +254 20 313985-9  +254 20 313922
  '---''(_/--'  `-'\_)     | GSM: +254 722 743223   +254 733 744121
+======================================================================+
We are all in the gutter, but some of us are looking at the stars.
		-- Oscar Wilde
Received on Sun Mar 05 2006 - 01:57:22 MST

This archive was generated by hypermail pre-2.1.9 : Sat Apr 01 2006 - 12:00:03 MST