Yes. There are several ways to specify the ip addresses. You can specify a whole subnet Acl managers src 172.16.10.0/24 This would specify 172.16.10.1-254 You can specify individual Ip addresses Acl managers src 172.16.10.34 Or you can specify a range of specific Ip addresses Acl managers src 172.16.10.16-31 More information regarding acl's can be found at http://www.visolve.com/squid/squid24s1/access_controls.php#acl Regards Mark Barlow -----Original Message----- From: Bobby [mailto:bobby@xxxxxxxxxxxxxx] Sent: 12 June 2007 03:35 To: squid-users@xxxxxxxxxxxxxxx Subject: Re: Hole in my thinking - still On Monday 11 June 2007 18:23:58 Henrik Nordstrom wrote: > mån 2007-06-11 klockan 17:12 -0400 skrev Bobby: > > Hi, > > > > This is not resolving. Rather than debugging my setup please tell me how > > you would configure it. > > > > What I'm looking at is how do I specify different machines to be able to > > access only certain websites? > > > > Let's say, > > 172.16.10.16-31 are managers who can go anywhere and > > 172.16.10.96-254 are operators with limited access like only to > > .google.com and .paypal.com. > > # Allow managers unrestricted access > acl managers src ... > http_access allow managers > > # Allow operators access to a restricted set of sites > acl operators src ... > acl operator_sites dstdomain .google.com .paypal.com > http_access allow operators operator_sites > > # And deny all other access > http_access deny all Those three dots should mean the IP's, right? Then not having anything after allow managers means "all"? -- Bobby
