RE: [squid-users] Q: Deny all dstdomains except those in list.

From: Henrik Nordström <hno@dont-contact.us>
Date: Thu, 15 Aug 2002 18:19:21 +0200 (CEST)

On Thu, 15 Aug 2002, AMV Webmaster wrote:

> Henrik, you were right, I had "acl allowedclients src
> 10.1.1.0/255.255.255.0" prior to my allowedsites lines which apparently
> overrode those settings. Now it works!! :D I think I understand the logic
> now. Or not. ;)

The logics is pretty simple. http_access is a ordered list or rules (each
line is a rule). The first http_access rule that completely matches the
request (all listed acl:s are true) will determine if the request is
allowed or denied.

In logics it can be described like the following:

http_access allow/deny acl1 AND acl2 AND acl3 ...
OR
http_access allow/deny acl4 AND acl5 and acl6 ...
OR
...

where AND/OR is in their standard logics meaning (not the english
ambiguous meaning where and == or...).

Regards
Henrik
Received on Thu Aug 15 2002 - 10:19:26 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:38 MST