Re: [squid-users] acl dstdomains does not block!

Leslie Jensen wrote:
> Hello
>
> My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I
> can't get the folowing to work.
>
> # acl blocked_sites dstdomain .aftonbladet.se.
> acl blocked_sites dstdomain "/usr/local/etc/squid/dstdomain"
> deny_info ERR_ACCESS_DENIED blocked_sites
>
> http_access deny blocked_sites
>
> I've tried both to list the domain in squid.conf and in the file
> "/usr/local/etc/squid/dstdomain"
>
> None of the options seems to work, no blocking occours. If I put in the
> complete path to the ERR_ACCESS_DENIED, I get an error when I do
> squid -NCd1
>
> I suspect that maybe the order of the acl's can affect but I need some
> help to diagnose the problem.

Yes order is important. Squid processes http_access stop-down and first
match wins.

ERR_ACCESS_DENIED is the default page displayed for "http_access deny".
you don't have to specify its use.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
   Current Beta Squid 3.1.0.6