RE: [squid-users] Hole in my thinking - still

From: Mark Barlow <mark.barlow@dont-contact.us>
Date: Tue, 12 Jun 2007 09:09:34 +0100

Yes. There are several ways to specify the ip addresses. You can specify a
whole subnet
Acl managers src 172.16.10.0/24 This would specify 172.16.10.1-254
You can specify individual Ip addresses
Acl managers src 172.16.10.34
Or you can specify a range of specific Ip addresses
Acl managers src 172.16.10.16-31

More information regarding acl's can be found at
http://www.visolve.com/squid/squid24s1/access_controls.php#acl

Regards
 
Mark Barlow
 
-----Original Message-----
From: Bobby [mailto:bobby@d4business.com]
Sent: 12 June 2007 03:35
To: squid-users@squid-cache.org
Subject: Re: [squid-users] Hole in my thinking - still

On Monday 11 June 2007 18:23:58 Henrik Nordstrom wrote:
> mån 2007-06-11 klockan 17:12 -0400 skrev Bobby:
> > Hi,
> >
> > This is not resolving. Rather than debugging my setup please tell me how
> > you would configure it.
> >
> > What I'm looking at is how do I specify different machines to be able to
> > access only certain websites?
> >
> > Let's say,
> > 172.16.10.16-31 are managers who can go anywhere and
> > 172.16.10.96-254 are operators with limited access like only to
> > .google.com and .paypal.com.
>
> # Allow managers unrestricted access
> acl managers src ...
> http_access allow managers
>
> # Allow operators access to a restricted set of sites
> acl operators src ...
> acl operator_sites dstdomain .google.com .paypal.com
> http_access allow operators operator_sites
>
> # And deny all other access
> http_access deny all

Those three dots should mean the IP's, right?
Then not having anything after allow managers means "all"?

-- 
Bobby
Received on Tue Jun 12 2007 - 02:09:35 MDT

This archive was generated by hypermail pre-2.1.9 : Sun Jul 01 2007 - 12:00:04 MDT