Re: [squid-users] allowing access to only one FTP site....

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 3 Mar 2004 10:42:03 +0100 (CET)

On Wed, 3 Mar 2004, Emiel van Kalken wrote:

> I blocked access to all ftp sites, by putting a hash in front of the
> port 21 line in squid.conf.

This is better done by denying access to the ftp protocol

acl ftp protocol ftp
http_access deny ftp

> There is one user who needs access to one specific ftp site. Is it
> possible to just allow access to this one site and still deny all access
> to all other ftp traffic?

Then extend the above like

acl ftp protocol ftp
acl ftp_users src x.x.x.x
http_access deny ftp !ftp_users

This needs to be before where you allow access in http_access.

Regards
Henrik
Received on Wed Mar 03 2004 - 02:42:06 MST

This archive was generated by hypermail pre-2.1.9 : Thu Apr 01 2004 - 12:00:01 MST