Re: [squid-users] problem with acl, doesn't seem to work...

Fernando Medina wrote:
>
> This is very odd, the acl does not seem to apply, every IP gets through,
> instead of only the ones in my file:
>
> >From squid.conf:
>
> acl all src 0.0.0.0/0.0.0.0
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl SSL_ports port 443 563
> acl Safe_ports port 80 21 403 443 563 70 210 1025-65535
> acl Safe_ports port 280 # http-mgmt
> acl Safe_ports port 488 # gss-http
> acl Safe_ports port 591 # filemaker
> acl Safe_ports port 777 # multiling http
> acl CONNECT method CONNECT
> acl el_salvador src "/usr/local/squid/etc/autorizados"
>
>
> In the file /usr/local/squid/etc/autorizados I have ips in format:
> 10.0.0.1/255.255.255.255
> 10.0.0.2/255.255.255.255
> etc...
>
> everyone gets through . . .

Could there be an error in netmask somewhere in autorizados?

> and I was wondering can I specify a range like
> 10.0.0.1-10.0.0.25 or something liek that, thanks,

Yes, you can. 10.0.0.1-10.0.0.25/255.255.255.255 should work.

Or use the netmask to specify a particular subnet.

-- 
Jon Kay        pushcache.com                      jkay@pushcache.com
http://www.pushcache.com/                             (512) 420-9025
Squid consulting				  'push done right.'