[squid-users] blocking all but a few sites

let me first start by saying squid rocks! thank you to all the squid developers for creating a awsome product. now on with my qurestion...

i have my squid setup to use acl's to block certian sites for a group of users as well as the downloading of certian file types (ie. mp3, .scr, .vbs, etc.). but now i need to have another group setup to block all url's except that of maybe 20 site that they need access to. here is my currrent acl setup...

acl all_access src 1.2.3.1-1.2.3.254/255.255.255.0
acl restrained_access src 1.2.4.1-1.2.4.254/255.255.255.0
acl blockedsites url_regex -i "/etc/squid/block.txt"
acl unblockedsites url_regex -i "/etc/squid/unblock.txt"
acl blockfiles url_regex -i "/etc/squid/file_extention_block.txt"
acl denyadverts url_regex -i "/etc/squid/adblock.txt"

http_access deny denyadverts
http_access allow all_access
http_access allow localhost
http_access deny blockedsites !unblockedsites
http_access deny blockfiles
http_access allow restrained_access

would i add another acl like....

acl all_access src 1.2.3.1-1.2.3.254/255.255.255.0
acl restrained_access src 1.2.4.1-1.2.4.254/255.255.255.0
acl blocked_all src 1.2.5.1-1.2.5.254/255.255.255.0
acl blockedsites url_regex -i "/etc/squid/block.txt"
acl unblockedsites2 url_regex -i "/etc/squid/unblock2.txt"
acl unblockedsites url_regex -i "/etc/squid/unblock.txt"
acl blockfiles url_regex -i "/etc/squid/file_extention_block.txt"
acl denyadverts url_regex -i "/etc/squid/adblock.txt"
acl all_urls dst 0.0.0.0/0.0.0.0

http_access deny denyadverts
http_access allow all_access
http_access allow localhost
http_access deny blockedsites !unblockedsites
http_access deny blockfiles
http_access allow restrained_access
http_access deny all_url !unblockedsites2
http_access allow blocked_all

right?

thanks,
eric
Received on Fri Apr 06 2001 - 08:49:58 MDT