Re: squid config puzzle

OK, finally got back to this problem..

Anyway, the problem was I had "http_access allow auth" near the top of the
file..  and just need to move it down and change it to http_access allow
auth BOARDERS_ON_AFTER_SCHOOL  etc, etc  then repeat underneath for the
other time acls

so allow if auth and if the time acl is OK

and it works perfectly!

thanks for the help way back in April
Craig





On Fri, Apr 12, 2013 at 12:04 PM, Craig Knights <[email protected]>wrote:

> hmmm, I'll have to get my head around that after lunch..
>
> Thanks!
> Craig
>
>
>
> On Fri, Apr 12, 2013 at 10:54 AM, Alex King <[email protected]> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> It depends on what other http_access rules appear before and after the
>> ones you list.
>>
>> If your config was doing its job, no-one would be able to connect.  The
>> way it's written, the time has to be simultaneously before school, after
>> school and in the weekends, which is impossible in my universe.
>>
>> To do it right with the same acls, you would need:
>>
>> > http_access accept BOARDERS_ON_AFTER_SCHOOL
>> > http_access accept BOARDERS_ON_BEFORE_SCHOOL
>> > http_access accept BOARDERS_ON_WEEKENDS
>>
>> but since I assume you need/want to use denys here, alternatively:
>>
>> http_access deny DURING_SCHOOLTIME
>> http_access deny DURING_NIGHTTIME
>>
>> would also work with appropriate acls for DURING_SCHOOLTIME and
>> DURING_NIGHTTIME.
>>
>> Cheers,
>> Alex
>>
>> On 12/04/13 10:33, Craig Knights wrote:
>> > OK,  I'm doing something silly..
>> >
>> > I'm trying to time restrict a proxy..
>> >
>> > this from my squid.conf
>> >
>> >>>
>> > acl BOARDERS_ON_AFTER_SCHOOL time MTWTF 15:30-23:00
>> > acl BOARDERS_ON_BEFORE_SCHOOL time MTWTF 07:00-08:30
>> > acl BOARDERS_ON_WEEKENDS time SA 07:00-23:00
>> >
>> >
>> > http_access deny !BOARDERS_ON_AFTER_SCHOOL
>> > http_access deny !BOARDERS_ON_BEFORE_SCHOOL
>> > http_access deny !BOARDERS_ON_WEEKENDS
>> >>>
>> >
>> > but the proxy still goes... and it shouldn't
>> >
>> > where's my logic failing?
>> >
>> > hmmm, thanks,
>> > Craig
>> >
>> >
>> >
>> >
>> >
>> >
>> > _______________________________________________
>> > DunLUG mailing list
>> > [email protected]
>> > http://lists.ethernal.org/listinfo/dunlug
>> > DunLUG Wiki - http://dunlug.kallisti.net.nz/
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.12 (GNU/Linux)
>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>>
>> iEYEARECAAYFAlFnPwsACgkQ/9hyErrk+j4+vgCfUzrfVm7eX/tSSzoSrHvM2d+q
>> pYIAnROEzfxvfq6ul7zvWjRzjsDIRhqC
>> =aeHZ
>> -----END PGP SIGNATURE-----
>>
>> _______________________________________________
>> DunLUG mailing list
>> [email protected]
>> http://lists.ethernal.org/listinfo/dunlug
>> DunLUG Wiki - http://dunlug.kallisti.net.nz/
>>
>
>

_______________________________________________
DunLUG mailing list
[email protected]
http://lists.ethernal.org/listinfo/dunlug
DunLUG Wiki - http://dunlug.kallisti.net.nz/