Re: [squid-users] issue using 2 authentication groups

On Wednesday 20 February 2002 13:56, Van Bossche Koen wrote:
>
> acl limited-sites dstdomain "/etc/squid/sites-allow.txt"
> acl internetlimitedacl proxy_auth "/var/squid/auth/ltd-users"
> acl internetacl proxy_auth REQUIRED
>
> http_access allow limited-sites internetlimitedacl
> http_access allow internetacl
> http_access deny all

This should be something like

http_access allow limited-sites internetlimitedacl
http_access deny internetlimitedacl
http_access allow internetacl
http_access deny all

or perhaps

http_access allow internetacl !internetlimitedacl
http_access allow limited-sites internetlimitedacl
http_access deny all

You need to deny them access to the sites they should not be able to
reach somehow. If you first allow them access to the restricted sites
and then also allow everyone (including them) access to everything
then there is not much of a restriction in place.

Regards
Henrik

-- 
MARA Systems AB, Giving you basic free Squid support
Customized solutions, packaged solutions and priority support
available on request