[squid-users] Composite ACL

Dear All,
I am new to Linux, but I have successfuly loaded Squid 2.6.STABLE 4 on Fedora 6
I am using NCSA authentication, chpasswd and sarg for reporting.

I want Squid to

1. Use NCSA authentication. (working fine)
2. Restrict users to download files with specific extentions (working fine)
3. Allow user 'xyz' to view our organisation site only ' www.xyz.co.in'
(not working - xyz is surfing all the other sites also. How to
restrict to one site only??)
4. Restrict other users to xxrn site (working fine)
5. Restrict users to use messengers (yet to check)
6. Allow user 'abc' to even download and user messenger. (confuse how
to write acl?)

Key portion of squid conf is as follows:

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd
acl ncsa_users proxy_auth REQUIRED
acl user1 proxy_auth xyz
acl site dstdomain .xyz.co.in
acl reso src 172.16.251.0/255.255.255.0
acl restricted_files urlpath_regex -i ftp \.exe$ \.zip$ \.tar.gz$
\.gz$ \.rar$ \.mp3$ \.mp4$ \.avi$ \.mpeg$ \.mpg$ \.ram$ \.rm$ \.iso$
\.wav$ \.mov$ \.tar$ \.mdb$ \.dat$
acl msn url_regex -i gateway.dll
acl yahoo url_regex -i ^http://shttp.msg.yahoo.com
acl yahoo url_regex -i ^ http://pgq.yahoo.com
acl yahoo url_regex -i ^http://mtab.games.yahoo.com
acl yahoo url_regex -i ^ http://insider.msg.yahoo.com
acl yahoo url_regex -i ^ http://address.yahoo.com
acl yahoo url_regex -i ^http://insider.msg.yahoo.com/ycontent/?
acl yahoo url_regex -i ^http://us.il.yimg.com
acl porn url_regex "/etc/squid/xxrn.txt"
acl noporn url_regex "/etc/squid/noxxrn.txt"

http_access deny xxrn !noxxrn
http_access deny yahoo
http_access deny msn
http_access deny restricted_files
http_access allow ncsa_users
http_access allow user1 site
http_access allow reso

# And finally deny all other access to this proxy
http_access allow localhost
http_access deny all

can any body help me to edit my acl to get the desired output.

Regards

Arun Shrimali
Received on Sat Sep 15 2007 - 00:19:35 MDT