Re: [squid-users] my group no blocked sites but block some sites all others

> Hello, I have a list of sites that are blocked for my whole organization.
> And it works.
>
> The decision has been made that IT should be able to get to everything.
>
> I came up with: acl Dean src my.ip.address
> always_allow http_access Dean
>
> (I'm trying to do this from memory from home so the syntax is probably
> wrong)
>
> but this doesn't allow me access from my laptop. Does src mean the IP
> the
> request is coming from? When I look at the cache log, I don't even see
> that it's testing the acl Dean.
>
> I almost hate to ask because I know I should just figure it out. But the
> feeling in my department has been against using squid vs. an appliance.
> And unfortunately I have users constantly needing things.

Heres a bit if help: an appliance will most likely make that worse, as you
may have less control over what it does or does not.

If you are getting a lot of 'I can't get to X', or 'I need to view Y
internally', requests. There is likely a bit of config tweaking needed to
allow certain categories of things your users do frequently.

>
> Thanks in advance anyone who can offer any insight.
>

Correct, 'src' is the IP the request is coming from.

The rule though is: http_access allow Dean
and needs to above all the other http_access lines it overrides.

Amos
Received on Mon Aug 04 2008 - 00:45:35 MDT