Hi

Do you look this http://diskatel.narod.ru/sgquick.htm ?

Best regards,
Sergey.

----- Original Message ----- From: "Tim Dressel" <tjdres...@gmail.com>
To: <support@pfsense.com>
Sent: Wednesday, December 30, 2009 11:48 PM
Subject: [pfSense Support] More a package question - squidguard - ACL's and time restrictions


Hi folks,

I've searched the forums and found a bit of info on this, but I'm
clearly not understanding something here.

My goal is to restrict all http access to a couple of 2 hour blocks
per day. Say from 8:00am to 10:00am and 4:00pm to 6:00pm.

I've got squid installed and configured in transparent mode.

I've got squid guard installed (proxy filter).

In the filter, I've defined a time window of 08:00-10:00 (Time type is
weekly, Days set to all, nothing specified in date or date range but
I've also tried "*").

In the ACL I've created a list, given it a name, set the source ip to
be my subnet (192.168.2.0/24), chosen the Time drop down list to the
the time I defined above and enabled the log.

On the general tab I enable and save squidguard, then I apply all
changes. I still have internet access. Even if I force my browser
through the proxy on port 3128 I am not blocked.

I've confirmed that I'm getting NTP updates and the time is set
correctly on the firewall.

I've also tried setting the time to 00:00 to 23:59 to make sure it was
not a time sync issue.

If I change the ACL created to "Check this for disable this ACL rule",
then apply the settings, I am successfully blocked (both transparent
or not). But there seems to be no combination of times that I can
modify to permit a time window of internet access.

Would appreciate any feedback out there.

Thanks...

---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



---------------------------------------------------------------------
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org

Reply via email to