RE: [squid-users] How to configure squid for denying users to dodownload process for specified time range?

From: Henrik Nordstrom <hno@dont-contact.us>
Date: 26 May 2003 15:35:48 +0200

mån 2003-05-26 klockan 15.12 skrev Fernando Maior:

> > http_access deny GET office_hours nodownload1 nodownload2
> > http_access deny all
> >
> >
>
> Just for clarifying:
> Converting http access deny GET .. to meta-language:
>
> if (method is GET) and
> (time is office_hours) and
> (src is nodownload1 or nodownload2)
> then deny
>
> Is that correct?

No.

All acls listed on the same http_acces line are AND. The above
http_access line can never match..

deny if (method is GET) AND (time is office_hours) AND (src is
nodownload1) AND (src is nodownload 2)

If you want to OR things, then put them on separate http_access lines.

In case of OR of things of the same type, make a single ACL with all
things in the same acl such as

  acl nodownload src x.x.x.x y.y.y.y z.z.z.z ....

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.
If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Received on Mon May 26 2003 - 07:35:59 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:17:02 MST