Search squid archive

Re: Merge of acl

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



"Christoph Haas" wrote:
Regarding the combination of ACLs:
http://workaround.org/moin/HowSquidAclsWork

..for my purpose than are:

- permit always http access only from two ip addresses of my LAN (10.0.0.1 and 10.0.0.2)
- from 13:00 to 14:00 permit to all ip addresses of my LAN to http access

.. is correct:

acl all src 0.0.0.0/0.0.0.0
acl local_net src 10.0.0.0/255.255.255.0
acl ipok1 10.0.0.1/255.255.255.255
acl ipok2 10.0.0.2/255.255.255.255
acl timeok time 13:00-14:00

http_access allow local_net timeok time
http_access deny !ipok1, !ipok2

..thanks again.

------
Salvatore.


----- Original Message ----- From: "Christoph Haas" <email@xxxxxxxxxxxxxxxxx>
To: <squid-users@xxxxxxxxxxxxxxx>
Sent: Monday, December 05, 2005 8:31 PM
Subject: Re:  Merge of acl


On Monday 05 December 2005 16:47, sasa wrote:
- permit always http access only two ip addresses of my LAN (10.0.0.1
and 10.0.0.2)
- from 13:00 to 14:00 permit all ip addresses of my LAN to http access
- permit always all ip addresses of my LAN to use mail (port 25 and 110)

Squid is an HTTP proxy. It doesn't proxy SMTP or POP3. Whatever you want to
do - you are doing it the wrong way.

..but as I make to merge more acls ??

Regarding the combination of ACLs:
http://workaround.org/moin/HowSquidAclsWork

Christoph
--
~
~
".signature" [Modified] 1 line --100%--                1,48         All



[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux