Re: [squid-users] Re: squid3 block all 443 ports request

Hi Khalil,

You've supplied a logically invalid access rule, ie an impossible match.
You're trying to block everything that is on port 445 and also at the
same time everything that is *not* on 443.

I'd be surprised if you can get any access with that!

What you need is something like (if you want to block ssl)

http_access allow !SSL_ports
http_access deny SSL_ports

Swap it around if you want to allow SSL only.

Read the docs, the way acls and access rules is clearly explained there.

Access lists are logically and'ed in the same entry., and or'ed (in
order before a deny rule) over multiple entries.

acls are or'ed in the same entry, and across multiple entries.

Cheers

Alex

On 12/02/14 15:27, khadmin wrote:
> Hi,
> here is my squid.conf file.
> here is my configuration concerning ssl ports:
> acl SSL_ports port 443
> http_access deny SSL_ports !SSL_ports
>
> Regards,
> Khalil squid.conf
> <http://squid-web-proxy-cache.1019090.n4.nabble.com/file/n4664752/squid.conf>
>
>
>
> --
> View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid3-block-all-443-ports-request-tp4664735p4664752.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Wed Feb 12 2014 - 19:42:56 MST