Re: [squid-users] squid 2.6 as transparent proxy, question acls and safe ports?

mån 2007-03-05 klockan 09:20 -0500 skrev Dave:

> Do i need the above block?

It's good to have.

> It seems like manager is first being allowed then
> denied?

Yes. It's only allowed to localhost by default. Squid http_access rules
is read top down, looking for the first match.

> And i'm not sure the purpose of safeports, ssl_ports, and connect
> acls. Are they cached automatically or do i have to put in a firewall rule
> for them?

These restrict what people may use the proxy for, as a proxy (not
transparent interception).

A would recommend you to keep them, or you may find that people starts
to abuse the proxy for other stuff you did not want them to use the
proxy for..

Regards
Henrik