Your first ACL allow full access from local network (192.168.1.0/24) if your user arre inthis range squid will never go furher on the ACL check. Move the first line at the end. So squid will proceed your deny first.
Ragards, Arno Skarbet <[EMAIL PROTECTED] To: [EMAIL PROTECTED] fr> cc: Subject: [squid-users] Squid ACL 17.05.04 14:36 Hi, i'm using squid2.4stable7 and trying to stop user from downloading large file and access some server.this is my ACL: #My Access List acl limit_conn src 192.168.1.0/24 acl 6conn maxconn 6 acl post method post acl exe urlpath_regex -i \.exe$ acl local src 192.168.1.0/24 acl download dstdomain .download.com acl telecharger dstdomain .telecharger.com acl multimedia urlpath_regex -i \.mp3$ \.mpg$ \.mpeg$ \.rm$ \.avi$ \.asf$ \.wma$ \.wav$ \.wmv$ \.ogg$ \.midi$ \.mov$ \.movie$ acl application urlpath_regex -i \.zip$ \.rar$ \.gz$ \.tgz$ \.bz2$ \.msi$ \.bin$ \.tar$ \.com$ #END My Access List #My Rules http_access allow local http_access deny 6conn limit_conn http_access deny download http_access deny telecharger http_access deny exe !post http_access deny multimedia http_access deny application #END MY RULES but this does not work !!!!!!!!!!!!!!!!!!! can u show me what's wrong ? Yahoo! Mail : votre e-mail personnel et gratuit qui vous suit partout ! Créez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/ Dialoguez en direct avec vos amis grâce à Yahoo! Messenger !Téléchargez Yahoo! Messenger sur http://fr.messenger.yahoo.com ****************************************************************** DISCLAIMER - E-MAIL ------------------- The information contained in this E-Mail is intended for the named recipient(s). It may contain certain privileged and confidential information, or information which is otherwise protected from disclosure. If you are not the intended recipient, you must not copy,distribute or take any action in reliance on this information ******************************************************************