Re: ACL RULES

P.RAJARAM wrote:

> now sir i want to give 2 companies (192.168.2.0 and 192.168.3.0) only
> restricted access to specific urls

> now i have given my access control rules like this
>
> acl kg1 src 192.168.1.0/255.255.255.0
> acl kg2 src 192.168.2.0/255.255.255.0
> acl kg3 src 192.168.3.0/255.255.255.0
> acl all dst 0.0.0.0
> acl kgd url_regex '/usr/local/squid/kdsd'

First error here. ' should be "
acl kgd url_regex "/usr/local/squid/kdsd"

> now my http rules
>
> http_access deny kg2 !kgd
> http_access deny kg3 !kgd

Second error here. kg2 and kg3 is never allowed to anything. They are
denied to !kgd1 and denied to all.

> http_access allow kg1 all
>
> http_access deny all

A more appropriate http_access list is perhaps

http_access allow kg1 all
http_access allow kg2 kgd
http_access allow kg3 kgd
http_access deny all

---
Henrik Nordstrom
Spare time Squid hacker