Re: [squid-users] Hallo Gang ACL twist

22-Apr-02 at 09:35, Bjarni ��r Haraldsson (Bjarni@tolvusmidjan.is) wrote :
> Hi !
> I�ve a squid Squid/2.4.STABLE1 and I�m trying to block one net from using my
> cache I put the following line in goog faith:
> acl menet src 192.168.16.0/255.255.255.0
> http_access deny menet
>
> but when I do tailf /var/log/squid/access | grep 192.168.16.1
>
> I get some guys that are using my proxy, howcome????

Hello,

You might consider trying to just allow those nets that you want to use
the proxy, and then denying EVERYTHING else with:

acl all src 0.0.0.0/0.0.0.0
acl allowed src w.x.y.z/a.b.c.d

http_access allow allowed
http_access deny all

You did not quote the output from the access log - if you have lines with
TCP DENIED then it means people are trying to access the cache, and being
blocked.

Simon.

-- 
[Simon White. vim/mutt. simon@mtds.com. GIMPS:83.82% see www.mersenne.org]
If the brain was so simple that we could understand it, we would be so
simple that we could not understand it  -- Lyall Watson
[Linux user #170823 http://counter.li.org. Home cooked signature rotator.]