RE: [squid-users] How to configure squid for denying users to dodownload process for specified time range?

Em Qui, 2003-05-22 às 06:34, Winanjaya escreveu:
> Thanks .. but after I tried to use below acl .. the same problem the users
> still can do the download process .. why?
>
> acl download urlpath_regex -i \.exe$
> acl office_hours time 09:00-17:00
> acl GET method GET
>
> acl it_user1 src 192.168.1.88
> acl it_user2 src 192.168.1.89
>
> acl nodownload1 src 192.168.1.10
> acl nodownload2 src 192.168.1.11
>
> http_access allow it_user1
> http_access allow it_user2
> http_access allow nodownload1
> http_access allow nodownload2
>
> http_access deny GET office_hours nodownload1 nodownload2
> http_access deny all
>
>

Just for clarifying:
Converting http access deny GET .. to meta-language:

if (method is GET) and
   (time is office_hours) and
   (src is nodownload1 or nodownload2)
   then deny

Is that correct?

For example, if I have to use two or more acls of the
same type, they are interpreted using "or", and if I
use acls of different types, they are interpreted
using "and".

Is that correct?

Many thanks!

> any suggestion .. ? many thanks in advance
>
> Regards
> Winan
>
>
>
> -----Original Message-----
> From: Henrik Nordstrom [mailto:hno@squid-cache.org]
> Sent: Thursday, May 22, 2003 4:05 PM
> To: winanjaya@lippogeneral.com
> Cc: squid-users@squid-cache.org
> Subject: RE: [squid-users] How to configure squid for denying users to
> dodownload process for specified time range?
>
>
> tor 2003-05-22 klockan 09.23 skrev Winanjaya:
>
> > > acl download urlpath_regex -i \.exe$ \.zip$ \.mp3$ \.mpg$ \.mpeg$
> > > \.tar$ \.tag.gz$ \.tar.bz2$ \.tgz$ \.rpm$ \.iso$ [etc..]
> > > acl office_hours time 09:00-17:00
> > > acl GET method GET
> > > http_access deny GET office_hours download
> >
> > Thanks for your reply Henrik, but how if the rule is valid for some users
> > only? is it possible? many thanks
>
> Yes, just add a acl matching the users to the http_access line.
>
> Regards
> Henrik
>
>
> --
> Donations welcome if you consider my Free Squid support helpful.
> https://www.paypal.com/xclick/business=hno%40squid-cache.org
>
> Please consult the Squid FAQ and other available documentation before
> asking Squid questions, and use the squid-users mailing-list when no
> answer can be found. Private support questions is only answered
> for a fee or as part of a commercial Squid support contract.
>
> If you need commercial Squid support or cost effective Squid and
> firewall appliances please refer to MARA Systems AB, Sweden
> http://www.marasystems.com/, [email protected]
>
>
> ----------------------------------------- (on viruswall.lippogeneral.com)
>
> Powered by Interscan VirusWall
>
>
> ---------------------------------------------------------

-- 
Bye,
Fernando Maciel Souto Maior
fernando@araujo.com.br
http://www.araujo.com.br
+55+31 3270-5886