Search squid archive

Re: ACLs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 02.04.09 03:00, Merdouille wrote:
> i use a transparent squid proxy and i want :
> - access as manager with squidclient from localhost only
> - allow only computer from localhost to go every where
> 
> My ACLs :
> #============== ACL
> #       nom             type    
> acl     all                src              all
> acl     port              port            82
> acl     localnet         src             192.168.100.0/192.168.100.255
> acl     manager        proto          cache_object
> acl     PROTO          proto          http
> acl     METHOD        method       GET
> acl     localhost       src             127.0.0.1
> 
> I try :
> 
> http_access             allow           localhost manager
> http_access             allow           localnet port !manager
> http_access              deny            all !port !PROTO !METHOD

Why did you define "port" "PROTO" and "METHOD" acl's?
Did you read default config file? You are making things complicated, 

http_access allow manager localhost
http_access deny manager

http_access allow localhost
http_access deny all


Btw, "allow only computer from localhost to go every where", don't you
really mean "allow access only from localnet"? If so, replace localhost by
localnet in the latter http_access. But change localnet, as the netmask
isn't valid.

-- 
Matus UHLAR - fantomas, uhlar@xxxxxxxxxxx ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Enter any 12-digit prime number to continue.

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux