Re: problem: acl based on srcIP dstIP

Csaba Koller wrote:

> DW> http_access allow theone
> DW> http_access deny !thesubnet
> DW> http_access allow mostuser
> DW> http_access deny all
>
> The order is the key?

Yes.

I would probably use

http_access allow mostuser thesubnet
http_access allow theone

That way you can easily add other user classes without having to bother
with the ordering. Ordering is only important if you mix deny and allow
directives.

--
Henrik Nordstrom
Squid hacker