I read chapter 10 and also looked in Squid the Definitive Guide and I can
not find any thing in those references that would make me want to change my
acls.    Would it make sends that I need this many acls depending upon my
needs correct?



Jim Brouse
Internet Administrator
Information Technology Department
Pascua Yaqui Tribe of Arizona
Phone: 520-879-5813
E-mail: [EMAIL PROTECTED]




                                                                                       
                                                       
                    Henrik                                                             
                                                       
                    Nordstrom            To:     Jim_Brouse/[EMAIL PROTECTED]          
                                                
                    <[EMAIL PROTECTED]       cc:                                       
                                                           
                    he.org>              Subject:     Re: [squid-users] can not access 
sites due to acl when using ntlm auth                  
                                                                                       
                                                       
                    08/18/2004                                                         
                                                       
                    11:23 AM                                                           
                                                       
                                                                                       
                                                       
                                                                                       
                                                       




On Wed, 18 Aug 2004 Jim_Brouse/[EMAIL PROTECTED] wrote:

> egrep -v '^$|^#' /etc/squid/squid.conf  |grep http_access
> http_access allow manager localhost
> http_access deny manager
> http_access allow KIOSK.dstdomain
> http_access allow KIOSK
> http_access deny KIOSK
> http_access allow MYAIRMAIL
> http_access allow PAGING
> http_access deny PAGING
> http_access deny BLOCK.NOT.YAHOO
> http_access allow YAHOOMESSENGER
> http_access deny YAHOOMESSENGER
> http_access deny BLOCK.NOT.AOL
> http_access allow AOL
> http_access deny  AOL
> http_access deny lab.src  lab.dstdomain
> http_access allow lab.src
> http_access deny lab.src
> http_access allow LOG-ONLY-HOSTS
> http_access deny NO.NONBLOCK  NONBLOCK
> http_access allow NONBLOCK
> http_access allow NONPORN
> http_access deny BLOCK
> http_access deny MIMEBLOCK
> http_access deny RESTRICTED-BROWSER
> http_access deny RESTRICTED-DOM
> http_access allow manager ADMIN-HOSTS
> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports
> http_access deny to_localhost
> http_access deny all


I think you need to clean this up somewhat to get it under control. Spend
some time reading the introduction in Squid FAQ chapter 10 Access
Controls.

And please keep discusion on the mailinglist thanks.

Regards
Henrik




Reply via email to