Re: [squid-users] Merge of acl

"Christoph Haas" wrote:
> Regarding the combination of ACLs:
> http://workaround.org/moin/HowSquidAclsWork

..for my purpose than are:

- permit always http access only from two ip addresses of my LAN (10.0.0.1
and 10.0.0.2)
- from 13:00 to 14:00 permit to all ip addresses of my LAN to http access

.. is correct:

acl all src 0.0.0.0/0.0.0.0
acl local_net src 10.0.0.0/255.255.255.0
acl ipok1 10.0.0.1/255.255.255.255
acl ipok2 10.0.0.2/255.255.255.255
acl timeok time 13:00-14:00

http_access allow local_net timeok time
http_access deny !ipok1, !ipok2

..thanks again.

------
Salvatore.

----- Original Message -----
From: "Christoph Haas" <email@christoph-haas.de>
To: <squid-users@squid-cache.org>
Sent: Monday, December 05, 2005 8:31 PM
Subject: Re: [squid-users] Merge of acl

> On Monday 05 December 2005 16:47, sasa wrote:
>> - permit always http access only two ip addresses of my LAN (10.0.0.1
>> and 10.0.0.2)
>> - from 13:00 to 14:00 permit all ip addresses of my LAN to http access
>> - permit always all ip addresses of my LAN to use mail (port 25 and 110)
>
> Squid is an HTTP proxy. It doesn't proxy SMTP or POP3. Whatever you want
> to
> do - you are doing it the wrong way.
>
>> ..but as I make to merge more acls ??
>
> Regarding the combination of ACLs:
> http://workaround.org/moin/HowSquidAclsWork
>
> Christoph
> --
> ~
> ~
> ".signature" [Modified] 1 line --100%-- 1,48 All
>
Received on Tue Dec 06 2005 - 03:45:11 MST