RE: [squid-users-request@ircache.net: Re: Filter out Sex... Sites ]

That was it. Thanks for the help!

Don Brown

-----Original Message-----
From: Jim Deitch [mailto:jdeitch@comsys.mrms.navy.mil]
Sent: Friday, October 23, 1998 12:27 PM
To: dbrown@crystalcreative.com
Subject: Re: [squid-users-request@ircache.net: Re: Filter out Sex...
Sites ]

By chance do you have a blank line at the end of adultdomain.dat?
Try taking it out. This one bit me for about 3 hours one day.

Jim

Don Brown wrote:
> Nope, that didn't do it. Still denies access to everything. Is there
a
> way to determine which acl is doing it, or what is happening?
>
> Don Brown
> dbrown@CrystalCreative.com
> Crystal Creative Products, Inc.
> (513) 423-0731 ext. 256
>
>
> -----Original Message-----
> From: Peter van Dijk [mailto:peter-squid@attic.vuurwerk.nl]
> Sent: Friday, October 23, 1998 10:48 AM
> To: squid-users
> Subject: [squid-users-request@ircache.net: Re: Filter out Sex...
Sites]
>
>
> On Fri, Oct 23, 1998 at 08:52:28AM -0400, Don Brown wrote:
> > I've tried doing this, but when I use it, I get denied to
everywhere.
> > I've setup the deny, but not the "notsex" section, as I only want to
> > block the adult related sites. Can someone tell me what I've got
> > configured wrong? Here's the acl section from my squid.conf file:
> > -----------------------------------
> > acl manager proto cache_object
> > acl localhost src 127.0.0.1/255.255.255.255
> > acl all src 0.0.0.0/0.0.0.0
> > acl mercury src 12.63.229.10/255.255.0.0
> > acl pluto src 12.63.229.6/255.255.0.0
> > acl sexsites url_regex "/var/squid/etc/adultdomain.dat"
> > acl SSL_ports port 443 563
> > acl Dangerous_ports port 7 9 19
> > acl CONNECT method CONNECT
> >
> > http_access allow manager localhost
> > http_access allow manager mercury
> > http_access allow manager pluto
> > http_access deny manager
> >
> > # deny access to adult sites
> > http_access deny sexsites all
>
> This is incorrect. Here, you tell squid to 'deny' 'http_access' for
any
> requests
> matching 'sexsites' OR 'all'. Remove the 'all' from this line and you
> should be
> all set.
>
> I ran into a similar problem after installing squid (yesterday :)
which
> was
> fixed by putting the two ACL's on two separate lines and not combining
> them.
>
> > # Allow everything else
> > http_access allow all
> >
> > # Reply to all ICP queries we receive
> > icp_access allow all
>
> Greetz, Peter.
> --
> 'I guess anybody who walks away from a root shell at : Peter
van
> Dijk
> a nerd party gets what they deserve!' -- BillSF
> :peter@attic.vuurwerk.nl
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> -- --
> finger hardbeat@mdk.ml.org for my public PGP-key
> - --- - --- - --- - --- - --- - --- - --- - --- -

---
> -
> 
> 
-- 
Jim Deitch                        Sr. Systems Engineer
Alpha Solutions Corp.
On-Site: Commander Naval Surface Force, U.S. Pacific Fleet
Com:  +(619)556-0332              DSN: 312-556-0332
Fax:  +(619)556-5183              DSN: 312-526-5183
Cell: +(619)806-3835              DSN: Yeah, Right!