Search squid archive

Re: Is there a precedence in the allowed sites ACL ? (UNCLASSIFIED)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Em 15/01/14 17:08, Raczek, Alan J CTR USARMY SEC (US) escreveu:

Just curious that if there is an order that Squid goes in to match a site in
the allowed sites
ACL. Top down??

    Yeah ... basically top down.

http://wiki.squid-cache.org/SquidFaq/SquidAcl#Access_Lists

http_access allow|deny acl AND acl AND ...
    OR
http_access allow|deny acl AND acl AND ...
    OR
...


The action allow/deny will be inforced only if ALL rules (ACLs) are matched. On a 3 ACLs http_access line, for example, if two gives a match and the third not, the action will not be inforced.

Note that not inforcing a 'allow' rule is different from denying. Not inforcing a 'deny' rule, on the same logic, is different from allowing.

If a http_access action is not enforced, it will evaluate the next http_access line until it reaches the end of all http_access rules.



--


	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br

	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@xxxxxxxxxxxxxx
	My SPAMTRAP, do not email it








[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux