Re: [squid-users] Controling sub net users to a single URL

On 13-Mar-02 at 10:19, Bruce M Scott's inspired musing was thus :
> acl STANDARD dstdomain standards.com.au/online
> http_access allow STANDARD

This should work, as would the other. The only way to really find out is to
test :)

I would go for:
acl STANDARD dstdomain standards.com.au
http_access allow STANDARD

without the slash, to because otherwise you probably need urlpath_regex or
urlpattern_regex as well.

You will, of course, require acls for those people who are allowed to surf
anywhere, and an http_access deny all... perhaps it might look something like
this:

acl themanagement src 10.0.1.0/24
acl theplebs src 10.0.2.0/24
acl STANDARD dstdomain standards.com.au

http_access allow themangagement
http_access allow theplebs STANDARD
http_access deny all

You can combine 2 or more acls in one http_access line to accomplish a lot of
things. You can do it via time too, how about this, if your office day is
like mine (probably not) 8.30-12.30, 14.30-18.30:

acl WkMorn time MTWHF 8:30-12:30
acl WkAft time MTWHF 14:30-18:30

Then make your access lines like this, of course replacing those above:

http_access allow themanagement
http_access allow theplebs all !WkMorn !WkAft
http_access allow theplebs STANDARD
http_access deny all

Which means they will be able to surf anywhere out of office hours (as
declared in acls WkMorn and WkAft, note that the ! means NOT) but only to the
site STANDARD in office hours, and of course, as usual, themanagement can do
whatever they please :-)

-- 
|-Simon White               # GIMPS current unit progress: 38.18% #-|
|-Internet Services Manager # > http://www.mersenne.org/prime.htm #-|
|-MTDS S.A. 14, rue 16 novembre    :-Pd-;      tel: +212.3.737.4861-|
|-Rabat, Kingdom of Morocco      Cyberneckin'  fax: +212.3.737.4863-|