Re: restrict hosts to particular domains

alowe@hislora.com.au wrote:
>
> try this modified stuff:
>
> > How do I define on my squid.conf file to restrict particular IPs to
> > access only certain domains?
> >
> > I've tried doing the ff:
> >
> > acl allowedsites dstdomain dhl.com
> > acl allowedhost src 199.40.218.10-15/255.255.255.0
> >
> ># Remove this line--> http_access allow allowedsites
> > http_access allow allowedhost allowed_sites
> > http_access deny all
>
> the line marked remove is actually allowing the allowedsites to access
> anything, by just putting the second and third line, you allow them to the
> allowed_sites but nowhere else...

Not quite.

The first line allows everyone access to the host dhl.com.

The second line is bungled in two ways:
a) There is no allowed_sites ACL defined
b) The allowedsites ACL is wrongly defined if your intention is to only
match those 6 addresses. The netmask masks out the addresses and the ACL
matches the whole class-C subnet. IP host ranges are better written
without any netmask.

However, this does not explain the behaviour you are seeing.

Is there any other http_access lines before your "deny all" line?
Is there any warnings about missing ACL declarations in cache.log when
Squid is starting up?
How is the ACL "all" defined? It SHOULD and MUST be defined as
0.0.0.0/0, nothing else.

--
Henrik Nordstrom
Squid hacker