Hi list, I've running 2.5-STABLE.4, I've problems setting up
the acl list, here is my config...I'm trying to deny some
clients to access only URLs that contains .cu and no others,
when I comment the authentication it works but with
proxy_auth it doesn't works...any suggestion ???

acl all src 0.0.0.0/0.0.0.0
 acl manager proto cache_object
 acl localhost src 127.0.0.1/255.255.255.255
 acl to_localhost dst 127.0.0.0/8
 acl LAN src 192.168.1.0/24
acl CUBA src 192.168.2.8/29
acl INTERNET src 192.168.2.16/29
acl ONLY_CU dstdomain .cu
 acl BLOCKED_WORDS url_regex -i
"/usr/local/squid-2.5/etc/blocked_words"
 acl BLOCKED_IPS dst "/usr/local/squid-2.5/etc/blocked_ips"
 acl BLOCKED_SITES dstdomain -i
"/usr/local/squid-2.5/etc/blocked_sites"
 acl FULL_USERS proxy_auth
"/usr/local/squid-2.5/etc/full_users"
acl LIMITED_USERS proxy_auth
"/usr/local/squid-2.5/etc/limited_users"
acl TIMES time MTWHFA 07:00-19:00
 acl SSL_ports port 443 563
 acl Safe_ports port 80         # http
 acl Safe_ports port 21         # ftp
 acl Safe_ports port 443 563    # https, snews
 acl CONNECT method CONNECT

 http_access deny BLOCKED_WORDS
 http_access deny BLOCKED_IPS
 http_access deny BLOCKED_SITES

http_access allow LAN

http_access deny manager
 http_access deny !Safe_ports
 http_access deny CONNECT !SSL_ports
 http_access deny to_localhost

 http_access allow manager localhost
http_access allow FULL_USERS
http_access allow LIMITED_USERS TIMES
http_access deny LIMITED_USERS
http_access allow CUBA ONLY_CU
http_access allow INTERNET

http_access deny all


Reply via email to