On Sun, 6 Feb 2005, thomas wrote:
# List of http_access http_access allow localhost http_access allow localnetwork http_access allow ncsa_users http_access allow Safe-ports http_access allow password http_access allow all
Why have you removed the recommended rules intended to block abuse?
To answer your question I would recommend reading the Squid FAQ 10.1 Access Controls - Introduction for a description of how the http_access directive works.
Regards Henrik