Re: [squid-users] Howto protect one network using ACL?

Dear Mr.Colin,

This is my complete configuration (i refer to your config):

acl localnet10 src 192.168.10.0/255.255.255.0
acl yahoo url_regex -i ^http://http.msg.yahoo.com
acl MORNING time MTWHF 08:00-11:59
acl LUNCH time MTWHF 12:00-12:59
acl AFTERNOON time MTWHF 13:00-16:59
acl EVENING time MTWHF 17:00-23:59
acl MIDNIGHT time MTWHF 00:00-07:59

and the restriction rules:
http_access deny localnet10 yahoo MORNING
http_access deny localnet10 yahoo AFTERNOON
http_access allow localnet10 yahoo LUNCH
http_access allow localnet10 yahoo EVENING
http_access allow localnet10 yahoo MIDNIGHT
http_access allow localnet10

Thank you very much Mr.Colin. And Have a Nice Day there.

best regards from indonesia,

Derix Suartyo.

Colin Campbell wrote:

> Hi,
>
> Let's go back to your original ACLs. What you probably wanted was
>
> acl localnet10 src 192.168.10.0/255.255.255.0
> acl yahoo url_regex ^http://http.msg.yahoo.com
> acl WORKING time MTWHF 08:00-17:00
> acl LUNCH time MTWHF 12:00-13:00
>
> Now restrict combinations of these, ie:
>
> http_access allow localnet10 yahoo LUNCH
> http_access allow localnet10 yahoo !WORKING
> http_access deny localnet10
>
> I suspect that's what you were originally trying to achieve: allow
> localnet10 access only to yahoo and only at lunchtime and not during
> "working" hours.
>
> Colin

--
D��x Su�ty�
SysEng@Fujitsu Systems Indonesia
Cross Industry Solution Department
Jalan Cideng Timur no 55, Jakarta 10160
Tel:62-21-3442601 (ext 453)
Fax:62-21-3442595
http://www.systemwalker.com
-=GOD is the master of my fate; GOD is the captain of my soul=-