Re: [squid-users] Is there a precedence in the allowed sites ACL ? (UNCLASSIFIED)

From: Leonardo Rodrigues <leolistas_at_solutti.com.br>
Date: Wed, 15 Jan 2014 18:59:02 -0200

Em 15/01/14 17:08, Raczek, Alan J CTR USARMY SEC (US) escreveu:
>
> Just curious that if there is an order that Squid goes in to match a site in
> the allowed sites
> ACL. Top down??
>
     Yeah ... basically top down.

http://wiki.squid-cache.org/SquidFaq/SquidAcl#Access_Lists

http_access allow|deny acl AND acl AND ...
     OR
http_access allow|deny acl AND acl AND ...
     OR
...

     The action allow/deny will be inforced only if ALL rules (ACLs) are
matched. On a 3 ACLs http_access line, for example, if two gives a match
and the third not, the action will not be inforced.

     Note that not inforcing a 'allow' rule is different from denying.
Not inforcing a 'deny' rule, on the same logic, is different from allowing.

     If a http_access action is not enforced, it will evaluate the next
http_access line until it reaches the end of all http_access rules.

-- 
	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br
	Minha armadilha de SPAM, NÃO mandem email
	gertrudes_at_solutti.com.br
	My SPAMTRAP, do not email it
Received on Wed Jan 15 2014 - 20:59:18 MST

This archive was generated by hypermail 2.2.0 : Thu Jan 16 2014 - 12:00:05 MST