Re: acl - dstdomain - srcdomain

Ratkai Peter wrote:

> I need to have a special access-list for my users. This is a corporate
> netwok, so no .exe .zip .arj files can be downloaded by the users.
> Some http queries use .exe extension in the address, so squid denies
> it as well. Do you know a workaround for this?

Identy those, and exclude them form denial.

acl permitted_exes "/squid/etc/permittedexe.list"
http_access deny !permitted_exes denied_extenstions

> http_access allow minimal_hosts minimal password
>
> I've tried this, but does not work. the file dstdomain.list contains the
> allowed url's, and the srcdomain.list.minimal contains the domain names
> associated with this group. I may do something wrong.

It should work. I think.

If you turn on debugging then it is very easy to see how your ACL's are
processed and where it goes wrong (preferably done on a non-production
server with no other traffic at the time).

--
Henrik Nordstrom
Spare time Squid hacker