Re: problem with squidGuard.conf

[Stéphane MOUREY]

The time stuff works now! Thanks for your help.
But the privileged users are not so privileges... and one is my boss!
Here is the changed part of the squidGuard.conf:
>
src privileged {
ip 192.168.31.202
ip 192.168.31.205
ip 192.168.31.215
ip 192.168.31.194
ip 127.0.0.1
}
src normal {
ip 192.168.31.0/24
}
acl {
privileged {
pass !virus all
}
normal within lunchtime {
pass mondiaallow mondialunch ads mail !mondiadeny !porn !aggressive 
!audio-video !drugs !gambling !hacking !porn !proxy !violence !warez 
!virus all
redirect http://192.168.31.11/denied.php?targetgroup=%t&url=%u
} else {
pass mondiaallow !mondialunch !ads !mail !mondiadeny !porn !aggressive 
!audio-video !drugs !gambling !hacking !porn !proxy !violence !warez 
!virus all
redirect http://192.168.31.11/denied.php?targetgroup=%t&url=%u
}
default {
pass none
redirect http://192.168.31.11/denied.php?src=badip
}
}
>eof

Any idea?
C. Falconer wrote:
At a guess it’s the src line for the priv users
Try
src privileged {
        ip      192.168.31.202
        ip      192.168.31.205
        ip      192.168.31.215
        ip      192.168.31.194
        ip      127.0.0.1
}
And for the time stuff it may be that default cannot have time restrictions.
Try
source normal     { ip    192.168.0.0/16 }
acl {
   normal within lunchtime {
       pass mondiaallow mondialunch ads mail !mondiadeny !porn 
!aggressive !audio-video !drugs !gambling !hacking !porn !proxy 
!violence !warez !virus all
               redirect 
http://192.168.31.11/denied.php?targetgroup=%t&url=%u
   } else {
       pass mondiaallow !mondialunch !ads !mail !mondiadeny !porn 
!aggressive !audio-video !drugs !gambling !hacking !porn !proxy 
!violence !warez !virus all
       redirect http://192.168.31.11/denied.php?targetgroup=%t&url=%u
   }

     default {
               pass none
               redirect
http://192.168.31.11/cgi-bin/blocked.badip?clientaddr=%a&clientname=%n&clien
tident=%i&srcclass=%s&targetclass=%t&url=%u
       }
}
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stéphane MOUREY
Sent: Tuesday, 15 March 2005 4:22 a.m.
To: squidguard@squidguard.org
Subject: problem with squidGuard.conf
src privileged {
    ip    192.168.31.202 192.168.31.205 192.168.31.215 192.168.31.194
}
...
acl {
   privileged {
        pass !virus all
    }
   default within lunchtime {
       pass mondiaallow mondialunch ads mail !mondiadeny !porn 
!aggressive !audio-video !drugs !gambling !hacking !porn !proxy 
!violence !warez !virus all
               redirect 
http://192.168.31.11/denied.php?targetgroup=%t&url=%u
   } else {
       pass mondiaallow !mondialunch !ads !mail !mondiadeny !porn 
!aggressive !audio-video !drugs !gambling !hacking !porn !proxy 
!violence !warez !virus all
       redirect http://192.168.31.11/denied.php?targetgroup=%t&url=%u
   }
}


 


--
Stéphane MOUREY
Technicien réseau
tel:+33 (0) 3 88 43 05 10
-
WINCANTON MONDIA
http://www.mondia.fr