Re: [squid-users] acl list question

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 10 Mar 2004 22:25:37 +0100 (CET)

On Wed, 10 Mar 2004, Payal Rathod wrote:

> Ok. Maybe you are right. But then what is the correct acl list I have to
> use?

If you want to block something without requesting a new login then the
last acl on your deny line needs to be something else than a proxy_auth
acl type. Squid "magically" asks for a new login if the request is denied
by a proxy_auth acl.

This will automatically request a new login:

http_access deny ... proxy_auth_based_acl

This will not:

http_access deny ... proxy_auth_based_acl ...

If you do not find a logical ACL to place last then you can always use the
"all" acl.

http_access deny ... proxy_auth_based_acl all

> >From my last mail,
> 1078930602.788 95 192.168.10.20 TCP_IMS_HIT/304 211 GET
> http://www.relianceinfo.com/Infocomm/swf/vars10.txt shilpa NONE/-
> text/plain
>
> I think I haven't used acl logically. Any ideas on it?

This request was allowed.

Regards
Henrik
Received on Wed Mar 10 2004 - 14:25:41 MST

This archive was generated by hypermail pre-2.1.9 : Thu Apr 01 2004 - 12:00:02 MST