Search squid archive

Re: ACL and http_access

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

this solution works very well ! i think a set of "allow" then "deny" is better to understand too.

It's resolved, thank you very much.

Enrique


From: magiclink@xxxxxxxxxxx
To: antony.stone@xxxxxxxxxxxxxxxxxxxx; squid-users@xxxxxxxxxxxxxxxxxxxxx
Date: Sun, 15 Nov 2015 11:32:32 +0100
Subject: Re: ACL and http_access

Thank you, i'll test it tomorrow.

My boss needs this because of his limited bandwith. And he really needs to limit the access during two crucial periods where the bandwith's availability is very important.


Enrique

> From: Antony.Stone@xxxxxxxxxxxxxxxxxxxx
> To: squid-users@xxxxxxxxxxxxxxxxxxxxx
> Date: Sun, 15 Nov 2015 10:06:59 +0100
> Subject: Re: ACL and http_access
>
> On Thursday 12 November 2015 at 15:55:10, Magic Link wrote:
>
> > I want people don't have access to Internet, except one hour twice a day
> > with only some urls.listed in a file
>
> On 14/11/2015 11:23 p.m., Magic Link wrote:
>
> > I 've made a mistake so what i want is users can access Internet, except
> > these two periods where they can access only few sites defined in the
> > file. I'll try next monday and come back here.
>
> On Sunday 15 November 2015 at 03:01:44, Amos Jeffries wrote:
>
> > Then your config needs to be:
> >
> > acl hours time MTWHF 09:30-10:30
> > acl hours time MTWHF 17:30-18:30
> >
> > http_access allow localhost
> > http_access deny hours !whitelist
> > http_access allow network
> > http_access deny all
>
> Or, if you find it easier to understand:
>
> acl hours time MTWHF 09:30-10:30
> acl hours time MTWHF 17:30-18:30
>
> http_access allow localhost
> http_access allow network hours whitelist
> http_access allow network !hours
> http_access deny all
>
> That means "allow network access to whitelisted sites during the defined hours,
> or allow general access outside those hours".
>
> Personally I find a set of "allow" rules easier followed by a "deny" rules to
> understand the logic of than interleaved "allow" and "deny" rules :)
>
> However, I find the new requirement very strange - would you mind sharing, just
> for interest's sake, why you want to implement this type of Internet access?
>
>
>
> Antony.
>
> --
> I want to build a machine that will be proud of me.
>
> - Danny Hillis, creator of The Connection Machine
>
> Please reply to the list;
> please *don't* CC me.
> _______________________________________________
> squid-users mailing list
> squid-users@xxxxxxxxxxxxxxxxxxxxx
> http://lists.squid-cache.org/listinfo/squid-users

_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux