Re: [squid-users] Subnet ACL Config - 2nd Try

Joe Giles wrote:

> http_access deny bad_url_regex
> http_access deny baddomainlist
> http_access allow good_sites !dc1 !dc2 *See Below
> http_access allow dc1 DC1_url_list1
> http_access allow dc2 DC2_url_list2
> http_access deny all

This looks very good to me and is how this type of access controls is
normally set up.

> http_access allow dc1 DC1_url_list1 !dc2
> http_access allow dc2 DC2_url_list2 !dc1
> http_access deny all
>
> Then both subnets stop working totally.

Then I think your definitions of dc1 and dc2 are wrong somehow.

Check your squid.conf again. Maybe the acls are defined twice with
different networks or something..

Also check your configuration with "squid -k parse" to detect any syntax
errors.

Regards
Henrik

-- 
Free Squid-users support provided by Henrik Nordström
<hno@squid-cache.org>
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com