Re: [squid-users] ACL compisition

From: Matus UHLAR - fantomas <uhlar_at_fantomas.sk>
Date: Mon, 20 Feb 2012 14:07:34 +0100

On 20.02.12 12:58, Paolo Supino wrote:
>All my other http_access rules are either based on a single "acl src",
>"acl dst" (and variants) or "acl src, acl dst". The question (and not
>a problem) is whether I can have a http_access rule that is built from
>a: "acl src, acl dst and acl port"?

yes, you can. However you must deny some access in order for it to be
denied, otherwise may just allow all and wonder why it's not denied
(better don't rely on default rules)

>Anyhow Amos Jeffries replied me in private and taught me that it can
> be done...

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Save the whales. Collect the whole set.
Received on Mon Feb 20 2012 - 13:07:39 MST

This archive was generated by hypermail 2.2.0 : Mon Feb 20 2012 - 12:00:04 MST