Re: [squid-users] my group no blocked sites but block some sites all others

Amos Jeffries wrote:
>> Hello, I have a list of sites that are blocked for my whole organization.
>> And it works.
>>
>> The decision has been made that IT should be able to get to everything.
>>
>> I came up with: acl Dean src my.ip.address
>> always_allow http_access Dean
>>
>> (I'm trying to do this from memory from home so the syntax is probably
>> wrong)
>>
>> but this doesn't allow me access from my laptop. Does src mean the IP
>> the
>> request is coming from? When I look at the cache log, I don't even see
>> that it's testing the acl Dean.
>>
>> I almost hate to ask because I know I should just figure it out. But the
>> feeling in my department has been against using squid vs. an appliance.
>> And unfortunately I have users constantly needing things.
>>
>
> Heres a bit if help: an appliance will most likely make that worse, as you
> may have less control over what it does or does not.
>
> If you are getting a lot of 'I can't get to X', or 'I need to view Y
> internally', requests. There is likely a bit of config tweaking needed to
> allow certain categories of things your users do frequently.
>
>
>> Thanks in advance anyone who can offer any insight.
>>
>>
>
> Correct, 'src' is the IP the request is coming from.
>
> The rule though is: http_access allow Dean
> and needs to above all the other http_access lines it overrides.
>

Or alternatively as negated in the http_access line that denies access
to everyone else.

Original line:

http_access deny bad_sites

New line:

http_access deny bad_sites !Dean

> Amos
>
>

Chris
Received on Mon Aug 04 2008 - 19:01:13 MDT