### Local Access lists ###
# local accelerated domains
# (can also use dst ACL type to list the server addresses
# instead of domains)
acl localsites dstdomain ....
# management servers that can host cachemgr.cgi or use client
# to access cachemgr info/statistics
acl management_servers src 127.0.0.1 ...
### END of local access lists ###
# Other useful definitions (static)
acl all src 0.0.0.0/0
acl http proto http
acl port80 port 80
acl cachemgr proto cache_object
# Allow world access to localsites
http_access allow localsites http port80
# Allow magagement servers access to cachemgr
http_access allow cachemgr management_servers
# Deny all else
http_access deny all
-- Henrik Nordstrom Squid hacker Harald Scharf wrote: > > Hello to all, > > Im running Squid Version 2.3.STABLE2 as an http accellerator and a proxy > server. > The redirector works well with a simple perl script, but i have big > problems, > to tell squid, that he should only answer query for local domains. > The Probelm is : > Everybody in the world can enter a simple proxy setting for : > www.mydomain.com:80 > and the accellerator friendly makes this requets for the remote client. > I tried some acls like : > > acl localsites dstdomain myfirstdomain.com myseconddomain.com ... > acl clients src 0.0.0.0/0.0.0.0 > acl otherdsites 0.0.0.0/0.0.0.0 > http_access allow localsites > http_access allow clients > http_access deny othersites > > With this rules i could not obtain, that squid only serves for his local > domains. > > heeeeelp, please.... > > thx > Harald ScharfReceived on Mon Mar 19 2001 - 14:25:32 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:58:43 MST