Re: [squid-users] squid acl help needed
On Fri, 19 Sep 2003, Payal Rathod wrote: What if I have to allow from time 09:00-10:00 and 6:00-07:00 too with lunchbreak? I mean the users can access hotmail, yahoo in the abvoe 3 hours only. Then replace lunchbreak with the following acl coffeebreak time 09:00-10:00 acl coffeebreak time 13:00-14:00 acl coffeebreak time 18:00-19:00 Regards Henrik note: Squid-2.5.STABLE2 or later required, for earlier versions you need to create one ACL per time interval
Re: [squid-users] squid acl help needed
On Fri, Sep 19, 2003 at 02:14:49PM +0200, Henrik Nordstrom wrote: On Fri, 19 Sep 2003, Payal Rathod wrote: What if I have to allow from time 09:00-10:00 and 6:00-07:00 too with lunchbreak? I mean the users can access hotmail, yahoo in the abvoe 3 hours only. Then replace lunchbreak with the following acl coffeebreak time 09:00-10:00 acl coffeebreak time 13:00-14:00 acl coffeebreak time 18:00-19:00 Wowww! I thought that three acls by the same name might create a problem. -Payal Regards Henrik note: Squid-2.5.STABLE2 or later required, for earlier versions you need to create one ACL per time interval -- For GNU/Linux Success Stories and Articles visit: http://payal.staticky.com
RE: [squid-users] squid acl help needed
Then replace lunchbreak with the following acl coffeebreak time 09:00-10:00 acl coffeebreak time 13:00-14:00 acl coffeebreak time 18:00-19:00 Wowww! I thought that three acls by the same name might create a problem. No, all it does is combine them - just as if you did: acl coffeebreak time 09:00-10:00 13:00-14:00 18:00-19:00 Both will work. Adam
Re: [squid-users] squid acl help needed
On Fri, 19 Sep 2003, Payal Rathod wrote: Wowww! I thought that three acls by the same name might create a problem. Not as long as you always stuff the same type of content into the acl. For most ACLs you can list as many things as you want to match on the same line, or on multiple lines. The time acl is an exception that you can only list a single time per line, but you can still list multiple lines. Regards Henrik
RE: [squid-users] squid acl help needed
The time acl is an exception that you can only list a single time per line, but you can still list multiple lines. That I did not know - thanks for the correction. Adam
RE: [squid-users] squid acl help needed
I am at a loss to configure squid acl meeting the following requirements. There is a Squid FAQ on how acl and http_access logic works; read that if you haven't already. You'll need src, time, and dstdomain acls to get this to work, and you'll need to order them in http_acces properly. More info on the acls is available in the default squid.conf. If you try a specific setup and it doesn't do what you want, post to the list again. Explain what it is doing, what you expected it to do, and provide your squid.conf (without comments or blank lines). Adam
Re: [squid-users] squid acl help needed
On Thu, 18 Sep 2003, Payal Rathod wrote: Hi, I am at a loss to configure squid acl meeting the following requirements. 1. All clients must have internet access throughout the day. acl my_network src 192.168.10.0/24 ... [used below] 2. Clients 192.168.10.1, 192.168.10.2, 192.168.10.5 (can be changed to something appropriate if you wish) will have access to all sites throughout the day. acl special_clients src 192.168.10.1 ... http_access allow special_clients 3. Rest all can access net/other sites throughout but can access yahoo.com and hotmail.com *only* during 1:00 pm to 2:00 pm acl webmail dstdomain .yahoo.com .hotmail.com acl lunchbreak time 13:00-14:00 http_access deny !lunchbreak webmail http_access allow my_network in the order given, where instructed to by the comments in the default squid.conf. Regards Henrik
