Search squid archive

Re: ACLs Implementation help

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 09/11/10 20:25, Edmonds Namasenda wrote:
Dear all.
Using openSuse 11.2 and Squid 3.0 Stable 18

Besides commenting out anything to do with 'localnet', below is all that
I added or edited on squid.conf

# Authentication Program
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd

# Start ACLs (bottom of ACL section defaults)
acl passt proxy_auth REQUIRED        # Authentication file to be used
"passt"
acl net_ed src 10.100.10.0/24 <http://10.100.10.0/24> 192.168.7.0/24
<http://192.168.7.0/24> 10.208.6.0/24 <http://10.208.6.0/24>        # My
networks
acl dove src 10.100.10.248-10.100.10.255        # Unrestricted Internet
access I.P range
acl whrs1 time MTWHF 9:00-12:59        # Morning work shift
acl whrs2 time MTWHF 13:00-16:59        # Afternoon work shift
acl nowww dstdomain "/etc/squid/noWWW"        # Inaccessible URLs file path
acl nodwnld urlpath_regex "/etc/squid/noDWNLD"        # Unavailable
downloads file path

# End ACLs

# Start http_access Edits (top of http_access section defaults)
http_access allow dove        # Internet access without authentication,
denied URLs or download restrictions
http_access deny nowww whrs1 whrs2        # Deny URLs during work shifts

Um, this means that when the clock says simultaneously that it is both morning AND afternoon...

... to deny with an OR combine the time periods into one ACL name or split the http_access into two lines.

Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.9
  Beta testers wanted for 3.2.0.3


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux