[squid-users] ACL compisition

From: Paolo Supino <paolo.supino_at_gmail.com>
Date: Thu, 16 Feb 2012 15:51:18 +0100

Hi

I have the following scenario: I have a subnet that needs to get out
on the internet to 2 different subnets. To subnet1 it needs to be able
to access only in HTTP while to subnet2 it needs to be able to access
only in HTTPS. Is it possible to do the follwoing:

acl source_subnet src 192.168.100.0/255.255.255.0
acl destination_subnet1 dst 172.16.0.0/255.255.0.0
acl destination_subnet2 dst 172.31.0.0/255.255.0.0
acl HTTP_PORT port 80
acl SSL_PORT port 443

http_access allow source_subnet destination_subnet1 HTTP_PORT
http_access allow source_subnet destination_subnet2 SSL_PORT

If not, how do achieve my goal of limiting based on source,
destination subnets and destination port?

TIA
Paolo
Received on Thu Feb 16 2012 - 14:51:25 MST

This archive was generated by hypermail 2.2.0 : Fri Feb 17 2012 - 12:00:03 MST