Re: [squid-users] Don't Know Topic For This Question - Got it!

From: OTR Comm <otrcomm@dont-contact.us>
Date: Tue, 17 Feb 2004 09:21:37 -0700

> > acl wget_prog proxy_auth wget
> > acl our_networks src 192.168.1.0/24 ...
> > redirector_access deny wget_prog
> >
> > http_access allow password
> > http_access allow wget_prog
> > #http_access allow our_networks (Commented out for this test)
> > http_access deny all
> >
> > miss_access deny our_networks
>
> Hmm.. this does not look right. You need to allow wget miss_access and
> deny everyone else.
>
> Then you need to allow everyone who should be allowed to use the Squid
> server at all in http_access, this includes all your clients including
> wget.

The following configuration works, but I am not sure if the ordering of
the rules is correct or the most efficient ordering:

acl wget_prog proxy_auth wget
acl our_networks src 192.168.1.0/24 ...
redirector_access deny wget_prog

http_access allow password
http_access allow wget_prog
http_access allow our_networks
http_access deny all

miss_access allow wget_prog
miss_access deny password

Thanks,

Murrah Boswell
Received on Tue Feb 17 2004 - 09:21:57 MST

This archive was generated by hypermail pre-2.1.9 : Mon Mar 01 2004 - 12:00:02 MST