Hello Christoph, Thanks for your reply.
However, it still doesn't work..... I tried to add the subnet mask by the end of the acl line as below, but then access is given to all IPs in the network: acl subgroup src 120.202.200.20/255.255.255.0 Any other hint? Thanks + Regards, Fernanda =================================================== On 14 Mar 2004, Christoph Haas wrote: >On Sun, Mar 14, 2004 at 03:06:54PM -0300, [EMAIL PROTECTED] wrote: >> I have the following configuration: >> >> acl rionet src 120.202.200.0/255.0.0.0 >> acl morning time SMTWHFA 08:30-12:30 >> acl afternoon time SMTWHFA 13:30-18:30 >> acl denied_ext url_regex \.zip$ >> acl denied_ext url_regex \.midi$ \.wav$ >> acl denied_ext url_regex \.mpe?ga$ \.mp[23]$ \.m3u$ \.r[am]$ \.r[ap]m$ >> acl denied_ext url_regex \.mp[eg]$ \.mpeg$ \.qt$ \.mov$ \.avi$ >> acl denied_ext url_regex \.exe$ \.com$ \.bin$ \.scr$ \.dll$ \.EXE$ \.Exe$ >> acl allowed_ext url_regex hotmail.com$ webmail.exe$ iname.com$ >> >> http_access allow rionet allowed_ext >> http_access deny rionet denied_ext morning >> http_access deny rionet denied_ext afternoon >> http_access allow rionet >> http_access allow localhost >> http_access deny all >> >> How do I give total access to a sub-group of the IP range declared in >> rionet, i.e., IPs 120.202.200.20 and 120.202.200.25 have unrestricted >> access. > >The order of the ACLs matters. Just add another ACL on top of the other >http_access definitions like this: > >acl subgroup src 120.202.200.20 >acl subgroup src 120.202.200.25 >http_access allow subgroup > >If the list is longer you could as well link to an external file like... > >acl subgroup src "/etc/squid/subgroup.src" > >...and list the IPs there. > > Christoph > >-- >~ >~ >".signature" [Modified] 3 lines --100%-- 3,41 All > >---------- _________________________________________________________ Voce quer um iGMail protegido contra vírus e spams? Clique aqui: http://www.igmailseguro.ig.com.br Ofertas imperdíveis! Link: http://www.americanas.com.br/ig/