Re: Questions about acls

[Alberto Cappadonia <alberto.cappadonia@xxxxxxxxx>]

Il 17/06/10 15.22, John Doe ha scritto:
> > acl pippo src 192.168.1.10
> > acl limit maxconn 2
> > http access allow pippo
> > http access deny pippo limit
> >      
> You should swap the http lines.
> If pippo has more than 2 connections, deny pippo.
> If not; allow pippo.
>
>    
> > In addition, if I specify more that one
> > maxconn acl, which one will prevail?
> >      
> The first one that matches.
>
>    
> > proxy_auth
> > How this acl work?
> > does squid check every time for auth, or just one time?
> >      
> Check auth_param parameters
>
> JD
>    


OK! Thanks a lot for the answer!

There exist some special case such that squid does't apply the first 
matching rule strategy to choose the rule to apply to a packet?

There exist documentation about the formal model used to evalute acl and 
http_access?

Alberto

<<attachment: smime.p7s>>