Re: [squid-users] acl dstdomain, bypass authorization

From: pujo mulyono <pudjo26@dont-contact.us>
Date: Fri, 22 Sep 2006 09:36:51 -0700 (PDT)

acl dstdomain begin with dot followed by domain name, for your case it
must be :

acl 1sk dstdomain .1sk.ru

--- Dmitry Melekhov <dm@belkam.com> wrote:

> Hello!
>
> I need to allow users access some sites without authorization.
>
> If I write acl:
>
>
> acl 1sk dstdomain 1sk.ru
> http_access allow our_nets 1sk
>
> it doesn't work
> but if
>
>
> acl 1sk dst 194.186.36.214
> http_access allow our_nets 1sk
>
> it works.
>
> our_nets is
> acl our_nets src 192.168.21.0/24 192.168.22.0/24 ....
>
>
>
> It is not very good to have acls based on dst ip address, because it
> can
> be changed ;-)
> Is it possible to use acl dstdomain in my situation?
>
>

regards,
Pudjo

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Received on Fri Sep 22 2006 - 10:37:04 MDT

This archive was generated by hypermail pre-2.1.9 : Sun Oct 01 2006 - 12:00:04 MDT