On Mon, 30 Aug 2010 12:28:06 +0930, "Greg Darby" <greg.darby@xxxxxxxxxxxxxx> wrote: > Hi, > > I am running Squid and a business decision was to deny access to FTP (Port > 21) hence it is not in the safe port list. We now have a supplier that > wishes for us to use FTP to download price lists etc however i have not > been > able to get Squid to allow the FTP traffic using ACL's without adding the > FTP port to the safe list. > > What i would like to ask is if there is a way to configure Squid to allow > outbound FTP connection to a single destination host only from a range of > source IP'sinside our network? Add it back to the Safe_ports list and add extra ACLs to control where is accessible to: acl FTP proto FTP acl supplier dstdomain example.com http_access allow FTP supplier http_access deny FTP Amos