<text re-sequenced>

> fre 2007-07-13 klockan 23:49 -0400 skrev [EMAIL PROTECTED]:
>> what i have in the squid.conf is something like this:
>>
>> acl porn url_regex -i "/etc/squid/porn"
>> acl allowed_site url_regex -i "/etc/squid/allowed"
>>
>> http_access deny porn
>
> replace the above with
>
> http_access deny !allowed_site porn
>
> Regards
> Henrik
>

> fre 2007-07-13 klockan 23:49 -0400 skrev [EMAIL PROTECTED]:
> If i do that, all clients will be allowed to Access these allowed sites
> without password or IPAddress verification. Considering that squid tries
> to
> find the first matching rule and doesn´t read any further. It will only
> reach that rule and ignore the rest of the access rules.

You are not entirely corrcet there.

Firstly, Squid will only allow sites if the "allow" permission is granted.
The ACL you were given was a DENY, it will at worst prevent access to a
site it shouldn't (the case you have right now).

Secondly, the ACL had two parts, BOTH must match before the rule is
considered. Thus is will fail to deny on any "allowed_sites" even if they
are "porn".

Also, please don't top-post.

Amos

>
> Administrador del Nodo C.Habana
> telefono: 863-1648
> web: www.ciudad.jovenclub.cu
> e-mail: [EMAIL PROTECTED]
>
> -----Mensaje original-----
> De: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
> Enviado el: sábado, 14 de julio de 2007 3:46
> Para: [EMAIL PROTECTED]
> CC: squid-users@squid-cache.org
> Asunto: Re: [squid-users] Allowing accidentally blocked sites
>
> fre 2007-07-13 klockan 23:49 -0400 skrev [EMAIL PROTECTED]:
>> I am filtering some porn sites using url_regex. I have some gneral
>> patterns in the file that block most of the bad sites but it also
>> blocks good sites which URLs contain those key words that are
>> registered in the url_regex file. I want to allow those sites
>> including safe internet navigation
>>



Reply via email to