Amos Jeffries wrote:
Hello, I have a list of sites that are blocked for my whole organization.
And it works.
The decision has been made that IT should be able to get to everything.
I came up with: acl Dean src my.ip.address
always_allow http_access Dean
(I'm trying to do this from memory from home so the syntax is probably
wrong)
but this doesn't allow me access from my laptop. Does src mean the IP
the
request is coming from? When I look at the cache log, I don't even see
that it's testing the acl Dean.
I almost hate to ask because I know I should just figure it out. But the
feeling in my department has been against using squid vs. an appliance.
And unfortunately I have users constantly needing things.
Heres a bit if help: an appliance will most likely make that worse, as you
may have less control over what it does or does not.
If you are getting a lot of 'I can't get to X', or 'I need to view Y
internally', requests. There is likely a bit of config tweaking needed to
allow certain categories of things your users do frequently.
Thanks in advance anyone who can offer any insight.
Correct, 'src' is the IP the request is coming from.
The rule though is: http_access allow Dean
and needs to above all the other http_access lines it overrides.
Or alternatively as negated in the http_access line that denies access
to everyone else.
Original line:
http_access deny bad_sites
New line:
http_access deny bad_sites !Dean
Amos
Chris
