[squid-users] Config question for multiple networks

L.S.,

I'm wondering how to configure our proxy server for the following
situation:

Our proxy/firewall server connects two LAN's to the internet.
On both LAN's we have private web servers, witch should not be accessable
from the other LAN.

I've tried to define the following acl's:

     acl lan1 src 10.0.0.0/255.255.0.0
     acl lan1_deny dst 10.30.0.0/255.255.0.0
     acl lan2 src 10.30.0.0/255.255.0.0
     acl lan2_deny 10.0.0.0/255.255.0.0

     http_access deny lan1_deny
     http_access allow lan1
     http_access deny lan2_deny
     http_access allow lan2

This config resulted in the fact that nobody could access the local private
web services as well as the other LAN's private webservices.

Does anyone have a suggestion?

Thanks in advance,

Auke Rensen
Received on Tue Mar 26 2002 - 04:25:48 MST