[squid-users] dstdomain question

2008-03-09 Thread Monah Baki
Hi all, I'm running squid with authentication, and my users are running IE. Of-course once they enable proxy in IE setting, MSN no longer works. I read by using the dstdomain before authentication in your squid.conf, users are able to use MSN messenger without manually adding the username

Re: [squid-users] dstdomain question

2008-03-09 Thread Monah Baki
I think I got it, I am able to connect once I added in my squid.conf the following acl msnmessenger url_regex -i gateway.dll acl msnURL dstdomain .passport.com acl msnURL dstdomain .live.com acl msnURL dstdomain .msn.com http_access allow msnmessenger http_access allow msnURL This works on my

Re: [squid-users] dstdomain question

2008-03-10 Thread Bgs
The http_access should look like this: http_access allow msnmessenger msnURL The two separate lines mean that you allow all kind of connections to the listed domains and you also allow all connections that have gateway.dll in the url (non msnURL sites too). For example you can browse msn.co

Re: [squid-users] dstdomain question

2008-03-10 Thread Bgs
The main logic in a nutshell: acl: elements are ORed (be it a single line, multiple line or file) http_access: a single line's acl elements are ANDed and if matched, you get a final allow or deny depending what your line says. If there is no match, check goes to the next line. In your case: