Re: [SQU] acl allow and deny, is it order dependent?

From: Ilja Pavkovic <illsen@dont-contact.us>
Date: Wed, 18 Oct 2000 01:53:14 +0200

Hi,

> http_access deny deniedsites
> http_access allow allowedsites
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
this means, that everyone can access sites matching "allowedsites". The
latter rule with password authentification and restricted access time is
passed by this rule.
> http_access allow noporn all
> http_access deny porn
> http_access allow all okTime password
> http_access deny all

The following will do the job:
http_access deny deniedsites
http_access deny porn
http_access allow all okTime password allowedsites
http_access allow all okTime password noporn
http_access deny all

"http_access deny all".

>
> Meaning there is no need for:-
>
> acl weTime time AS 00:00-23:59
> acl amTime time MTWHF 00:00-08:59
> acl pmTime time MTWHF 18:30-23:59
yes.

> Boy if only there was a script to translate the acl and http_access
> parts of squid.conf into newbie language.
Sure, this would be a great help, but you normally restrict the set of
possible rules with such a tool.

Ilja Pavkovic

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Tue Oct 17 2000 - 17:54:00 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:55:46 MST