On 07.09.06 08:49, kashif Mazhar wrote: > Few days back i implement a two lines code in my squid.conf to > block selected users from extra downloads , i restcirt them in a way > that they cannot download more than 10-MB.(this is for restricted > users). > > acl limit urlpath_regex "/etc/squid/limit" > and linit file contains 2 IPs > > 172.16.18.XX > 172.16.18.XXX > 172.16.18.X 1. they are 3, not 2. 2. urlpath_regex matches the URL people access, it only matches if they will fetch from addresses like: http://172.16.18.XXX/something but also: http://www.example.com/check_ip?ip=172.16.18.XXX you should use acl limit src "/etc/squid/limit" to match exact IP's 172.16.18.XX, 172.16.18.XXX and 172.16.18.X. > after few days i came to knwo ppl who have ip in the range of > 172.16.18.XXX subnet they all cannot download more than 10-MB it;'s > simply means whole subnet is got blocked. 3. regex "172.16.18.X" matches 172.16.18.XX, 172.16.18.XXX and even 172.16.18.XYZ. using regexp's is also very ineffective. However -- Matus UHLAR - fantomas, uhlar@xxxxxxxxxxx ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95