[squid-users] Time acl
Hi everyone, Im trying to use a time acl inside a file: squid.conf ... acl working time "/working" ... /working MTWHF 08:00-20:00 And this gives the following error: 2003/06/16 14:43:34| squid.conf line 25: acl working time "/working" 2003/06/16 14:43:34| aclParseTimeSpec: Bad Day '0' 2003/06/16 14:43:34| squid.conf line 25: acl working time "/working" 2003/06/16 14:43:34| aclParseTimeSpec: Bad Day '8' 2003/06/16 14:43:34| squid.conf line 25: acl working time "/working" 2003/06/16 14:43:34| aclParseTimeSpec: Bad Day ':' 2003/06/16 14:43:34| squid.conf line 25: acl working time "/working" 2003/06/16 14:43:34| aclParseTimeSpec: Bad Day '0' ... But when i use only MTWHF inside /working it works perfectly. Where could be the problem? Thanks! Rafael Gustavo Gassner
[squid-users] time ACL
Hi all, Is there a way to restrict some users access to the internet at a particular time or this is glabol, applies to everyone who has their proxy setting pointed to the server. Thank you BSD Networking, Microsoft Notworking
[squid-users] Time acl issue
Greetings! I'm trying to use a time acl to liberate some site access for just a period of time, but the access stand available for an user after the time window expiration until the session is totally closed (i.e. close the browser [not only a firefix tab]). Is there any feature which take care of this? Thanks in advance. Veja quais são os assuntos do momento no Yahoo! +Buscados http://br.maisbuscados.yahoo.com
Re: [squid-users] time ACL
Yes, there's an acl named time that's described in squid.conf. # acl aclname time [day-abbrevs] [h1:m1-h2:m2] # day-abbrevs: # S - Sunday # M - Monday # T - Tuesday # W - Wednesday # H - Thursday # F - Friday # A - Saturday # h1:m1 must be less than h2:m2 You can make it work in conjunction with other acls. Regards, Isnard Em Qui, 2007-07-12 às 07:04 -0400, Monah Baki escreveu: > Hi all, > > Is there a way to restrict some users access to the internet at a > particular time or this is glabol, applies to everyone who has their > proxy setting pointed to the server. > > Thank you > > > BSD Networking, Microsoft Notworking > > >
Re: [squid-users] time ACL
How do I write the acl in such a way if all users IP is 192.169.10.0/32 but from Monday-Friday 192.168.10.6 and 192.168.10.7 can only use it from 10AM to 12PM. Thank you > Yes, there's an acl named time that's described in squid.conf. > > # acl aclname time [day-abbrevs] [h1:m1-h2:m2] > # day-abbrevs: > # S - Sunday > # M - Monday > # T - Tuesday > # W - Wednesday > # H - Thursday > # F - Friday > # A - Saturday > # h1:m1 must be less than h2:m2 > > You can make it work in conjunction with other acls. > > > Regards, > > Isnard > > > Em Qui, 2007-07-12 às 07:04 -0400, Monah Baki escreveu: >> Hi all, >> >> Is there a way to restrict some users access to the internet at a >> particular time or this is glabol, applies to everyone who has their >> proxy setting pointed to the server. >> >> Thank you >> >> >> BSD Networking, Microsoft Notworking >> >> >> >
Re: [squid-users] time ACL
Never mind, found it. AclDefnitions acl abc src 172.161.163.85 acl xyz src 172.161.163.86 acl asd src 172.161.163.87 acl morning time 06:00-11:00 acl lunch time 14:00-14:30 acl evening time 16:25-23:59 Access Controls http_access allow abc morning http_access allow xyz morning lunch http_access allow asd lunch Thanks > How do I write the acl in such a way if all users IP is 192.169.10.0/32 > but from Monday-Friday 192.168.10.6 and 192.168.10.7 can only use it from > 10AM to 12PM. > > Thank you > > >> Yes, there's an acl named time that's described in squid.conf. >> >> # acl aclname time [day-abbrevs] [h1:m1-h2:m2] >> # day-abbrevs: >> # S - Sunday >> # M - Monday >> # T - Tuesday >> # W - Wednesday >> # H - Thursday >> # F - Friday >> # A - Saturday >> # h1:m1 must be less than h2:m2 >> >> You can make it work in conjunction with other acls. >> >> >> Regards, >> >> Isnard >> >> >> Em Qui, 2007-07-12 às 07:04 -0400, Monah Baki escreveu: >>> Hi all, >>> >>> Is there a way to restrict some users access to the internet at a >>> particular time or this is glabol, applies to everyone who has their >>> proxy setting pointed to the server. >>> >>> Thank you >>> >>> >>> BSD Networking, Microsoft Notworking >>> >>> >>> >> > >
Re: [squid-users] time ACL
Try that... acl special_ips src 192.168.10.6/255.255.255.255 192.168.10.7/255.255.255.255 acl network src 192.168.10.0/255.255.255.0 acl special_time time MTWHF 10:00-12:00 http_access deny special_ips !special_time http_access allow network http_access deny all It will deny special_ips for time not in special_time scope, allow the rest of the network and deny the rest. Regards, Isnard Em Qui, 2007-07-12 às 08:06 -0400, Monah Baki escreveu: > How do I write the acl in such a way if all users IP is 192.169.10.0/32 > but from Monday-Friday 192.168.10.6 and 192.168.10.7 can only use it from > 10AM to 12PM. > > Thank you > > > > Yes, there's an acl named time that's described in squid.conf. > > > > # acl aclname time [day-abbrevs] [h1:m1-h2:m2] > > # day-abbrevs: > > # S - Sunday > > # M - Monday > > # T - Tuesday > > # W - Wednesday > > # H - Thursday > > # F - Friday > > # A - Saturday > > # h1:m1 must be less than h2:m2 > > > > You can make it work in conjunction with other acls. > > > > > > Regards, > > > > Isnard > > > > > > Em Qui, 2007-07-12 às 07:04 -0400, Monah Baki escreveu: > >> Hi all, > >> > >> Is there a way to restrict some users access to the internet at a > >> particular time or this is glabol, applies to everyone who has their > >> proxy setting pointed to the server. > >> > >> Thank you > >> > >> > >> BSD Networking, Microsoft Notworking > >> > >> > >> > > > >
[squid-users] time ACL not working properly
Hi, I have this external ACLs file included in squid.conf as "include /etc/squid/mediatypes.list" rite after http_port 3128 transparent line. The problem is that it is block every thing i listed but not following the "time" ACL I've applied with it. Any idea what could be wrong here? # Media Streams acl MediaTypesBusinessHours time MTWHF 9:00-13:00 acl MediaTypesBusinessHours time MTWHF 14:30-19:00 ## Active Stream Format (Windows Media Player) acl media rep_mime_type video/x-ms-asf acl mediapr urlpath_regex \.(afx|asf|asr|asx)(\?.*)?$ ## Flash Video Format acl media rep_mime_type video/flv video/x-flv acl mediapr urlpath_regex \.flv(\?.*)?$ acl media rep_mime_type application/x-amf acl media rep_mime_type video/mp4 acl mediapr urlpath_regex \.mp4(\?.*)?$ ## Flash General Media Scripts (Animation) #acl media rep_mime_type application/x-shockwave-flash #acl mediapr urlpath_regex \.swf(\?.*)?$ acl media rep_mime_type video/x-msvideo acl mediapr urlpath_regex \.avi(\?.*)?$ acl media rep_mime_type video/x-la-asf acl mediapr urlpath_regex \.(lsf|lsx)(\?.*)?$ acl media rep_mime_type video/quicktime acl mediapr urlpath_regex \.(qt|mov)(\?.*)?$ acl media rep_mime_type video/wmv acl mediapr urlpath_regex \.wmv(\?.*)?$ acl media rep_mime_type video/mpeg acl mediapr urlpath_regex \.(mp2|mpa|mpe|mpeg|mpg|mpv2)(\?.*)?$ ## Others currently unknown acl media rep_mime_type ms-hdr acl media rep_mime_type x-fcs http_access deny mediapr MediaTypesBusinessHours http_reply_access deny media MediaTypesBusinessHours -- Regards, Asim Ahmed Khan IT Manager, Folio3 (Pvt.) Ltd. www.folio3.com Direct: 92-21-4323721-4 Ext 110 Email: aah...@folio3.com
Re: [squid-users] time ACL not working properly
On Wed, 21 Oct 2009 19:25:50 +0500, "Asim Ahmed @ Folio3" wrote: > Hi, > > I have this external ACLs file included in squid.conf as "include > /etc/squid/mediatypes.list" rite after http_port 3128 transparent line. order relation to http_port is not important. What is important is where it is included in order relation to all other http_access lines. To see how squid views the config use: squidclient mgr:config (with the manager password) Squid will list all its http_access in the order it checks them. > The problem is that it is block every thing i listed but not following > the "time" ACL I've applied with it. Any idea what could be wrong here? > > # Media Streams > > acl MediaTypesBusinessHours time MTWHF 9:00-13:00 > acl MediaTypesBusinessHours time MTWHF 14:30-19:00 > > ## Active Stream Format (Windows Media Player) > acl media rep_mime_type video/x-ms-asf > acl mediapr urlpath_regex \.(afx|asf|asr|asx)(\?.*)?$ > > ## Flash Video Format > acl media rep_mime_type video/flv video/x-flv > acl mediapr urlpath_regex \.flv(\?.*)?$ > > acl media rep_mime_type application/x-amf > > acl media rep_mime_type video/mp4 > acl mediapr urlpath_regex \.mp4(\?.*)?$ > > ## Flash General Media Scripts (Animation) > #acl media rep_mime_type application/x-shockwave-flash > #acl mediapr urlpath_regex \.swf(\?.*)?$ > > acl media rep_mime_type video/x-msvideo > acl mediapr urlpath_regex \.avi(\?.*)?$ > > acl media rep_mime_type video/x-la-asf > acl mediapr urlpath_regex \.(lsf|lsx)(\?.*)?$ > > acl media rep_mime_type video/quicktime > acl mediapr urlpath_regex \.(qt|mov)(\?.*)?$ > > acl media rep_mime_type video/wmv > acl mediapr urlpath_regex \.wmv(\?.*)?$ > > acl media rep_mime_type video/mpeg > acl mediapr urlpath_regex \.(mp2|mpa|mpe|mpeg|mpg|mpv2)(\?.*)?$ > > ## Others currently unknown > acl media rep_mime_type ms-hdr > acl media rep_mime_type x-fcs > > http_access deny mediapr MediaTypesBusinessHours > http_reply_access deny media MediaTypesBusinessHours
[squid-users] time acl, domain acl and always direct
Hi I am a beginner squid user running Squid 2.7 on Windows NT I am trying to have certain domains go directly to the server on a specific time range and days.. could someone help me with the squid.conf? domain: Youtube site and cache time range to be direct connect to the net: 8am to 5pm time range to go through parent proxy: 5:01pm-7:59am setup: proxy pc has own internet connection with limited bandwidth uses parent proxy for most of the domains except those which are not allowed during work hours (8am-5pm) e.g youtube, google video, vimeo what I want to do is that those sites that are blocked on the parent proxy go through the machine's internet connection during work hours , and then the rest of the day they go through the parent proxy thanks!
Re: [squid-users] time acl, domain acl and always direct
On 12.09.2012 20:22, Benjamin Joseph Dag wrote: Hi I am a beginner squid user running Squid 2.7 on Windows NT I am trying to have certain domains go directly to the server on a specific time range and days.. could someone help me with the squid.conf? domain: Youtube site and cache time range to be direct connect to the net: 8am to 5pm time range to go through parent proxy: 5:01pm-7:59am setup: proxy pc has own internet connection with limited bandwidth uses parent proxy for most of the domains except those which are not allowed during work hours (8am-5pm) e.g youtube, google video, vimeo what I want to do is that those sites that are blocked on the parent proxy go through the machine's internet connection during work hours , and then the rest of the day they go through the parent proxy thanks! Define a time ACL for the work hours. ACL can be multiple lines like so: acl workHours time MTWHF 9:00-11:59 acl workHours time MTWHF 13:00-4:59 A dstdomain ACL for the sites like so: acl mediaSites dstdomain ... then add cache_peer_access rules to DENY access to the parent proxy outside those hours: cache_peer_access ... deny !workHours mediaSites always_direct allow !workHours mediaSites The tricky part is getting it in the right order in relation to all your other rules. Putting it above the other cache_peer_access rules should be fine. Note that time only matches *new* requests, so a video started seconds outside workHours times will continue to run until it stops. Amos
Re: [squid-users] time acl, domain acl and always direct
I will try and will reply if it works! Thanks! On Thu, Sep 13, 2012 at 7:55 AM, Amos Jeffries wrote: > On 12.09.2012 20:22, Benjamin Joseph Dag wrote: >> >> Hi I am a beginner squid user running Squid 2.7 on Windows NT >> >> I am trying to have certain domains go directly to the server on a >> specific time range and days.. >> >> could someone help me with the squid.conf? >> >> domain: Youtube site and cache >> time range to be direct connect to the net: 8am to 5pm >> time range to go through parent proxy: 5:01pm-7:59am >> >> setup: proxy pc has own internet connection with limited bandwidth >> uses parent proxy for most of the domains except those which are not >> allowed during work hours (8am-5pm) e.g youtube, google video, vimeo >> >> what I want to do is that those sites that are blocked on the parent >> proxy go through the machine's internet connection during work hours , >> and then the rest of the day they go through the parent proxy >> >> thanks! > > > > Define a time ACL for the work hours. ACL can be multiple lines like so: > acl workHours time MTWHF 9:00-11:59 > acl workHours time MTWHF 13:00-4:59 > > A dstdomain ACL for the sites like so: > acl mediaSites dstdomain ... > > then add cache_peer_access rules to DENY access to the parent proxy outside > those hours: > cache_peer_access ... deny !workHours mediaSites > always_direct allow !workHours mediaSites > > The tricky part is getting it in the right order in relation to all your > other rules. Putting it above the other cache_peer_access rules should be > fine. > > Note that time only matches *new* requests, so a video started seconds > outside workHours times will continue to run until it stops. > > Amos
