Re: [squid-users] Securing a SQUID server

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Sun, 25 Sep 2005 11:05:04 +0200 (CEST)

On Sat, 10 Sep 2005, Odhiambo Washington wrote:

>> I am now running our squid server (thanks to those who replied) as a
>> front for multiple web servers,
>> and it sure made a difference in speed!
>>
>> Originally I had set its ACLs pretty liberally, and now I would like to
>> curb it down so that only
>> traffic that is requesting web pages from our servers can access it.
>>
>> Does anyone have any ACLs that they can share?
>
> acl our_servers src cidr (e.g. a.b.c.d/29)
> http_access allow our_servers
> http_access deny all

Almost.. the above should be a dst acl, not a src acl.

Regards
Henrik
Received on Sun Sep 25 2005 - 03:05:11 MDT

This archive was generated by hypermail pre-2.1.9 : Sat Oct 01 2005 - 12:00:04 MDT