LINUX.IE, website of the Irish Linux Users' Group
Tux rules!

   
Home
New Users
Articles
Download
Projects
Community
Vendors

  Print Version
 
Archives:


planetILUG

Recent News

News Archive


Join the
ILUG
on FaceBook


Join the
ILUG
on LinkedIn


Join the
ILUG SETI
Group



















 
 :: Mailing Lists

[ILUG] Squid not allowing browsing

[ILUG] Squid not allowing browsing

Paul Jakma paul at clubi.ie
Wed Aug 24 16:53:20 IST 2005


On Wed, 24 Aug 2005, Chris Boyd wrote:

> http_access allow mynetwork
> http_access allow localhost
> http_access deny !Safe_ports
> http_access deny CONNECT
> http_access deny all

mynetwork will match before anything else, the rules after that won't 
apply to mynetwork. The first matching rule is used by squid.

With similar ACLs to yours, here's what I use:

http_access allow manager mynetwork
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !connect_ports !SSL_ports
http_access allow localhost
http_access allow mynetwork
http_access deny all

regards,
-- 
Paul Jakma	paul at clubi.ie	paul at jakma.org	Key ID: 64A2FF6A
Fortune:
Visits always give pleasure: if not on arrival, then on the departure.
 		-- Edouard Le Berquier, "Pensees des Autres"



More information about the ILUG mailing list
Read this without the formatting.
                                                                                                    

 

Hosted by HEAnet


Maintained by the ILUG website team. The aim of Linux.ie is to support and help commercial and private users of Linux in Ireland. You can display ILUG news in your own webpages, read backend information to find out how. Networking services kindly provided by HEAnet, server kindly donated by Dell. Linux is a trademark of Linus Torvalds, used with permission. No penguins were harmed in the production or maintenance of this highly praised website. Looking for the Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
RSS Version
Powered by Dell