Re: squid config puzzle

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It depends on what other http_access rules appear before and after the
ones you list.

If your config was doing its job, no-one would be able to connect.  The
way it's written, the time has to be simultaneously before school, after
school and in the weekends, which is impossible in my universe.

To do it right with the same acls, you would need:

> http_access accept BOARDERS_ON_AFTER_SCHOOL
> http_access accept BOARDERS_ON_BEFORE_SCHOOL
> http_access accept BOARDERS_ON_WEEKENDS

but since I assume you need/want to use denys here, alternatively:

http_access deny DURING_SCHOOLTIME
http_access deny DURING_NIGHTTIME

would also work with appropriate acls for DURING_SCHOOLTIME and
DURING_NIGHTTIME.

Cheers,
Alex

On 12/04/13 10:33, Craig Knights wrote:
> OK,  I'm doing something silly..
> 
> I'm trying to time restrict a proxy..
> 
> this from my squid.conf
> 
>>>
> acl BOARDERS_ON_AFTER_SCHOOL time MTWTF 15:30-23:00
> acl BOARDERS_ON_BEFORE_SCHOOL time MTWTF 07:00-08:30
> acl BOARDERS_ON_WEEKENDS time SA 07:00-23:00
> 
> 
> http_access deny !BOARDERS_ON_AFTER_SCHOOL
> http_access deny !BOARDERS_ON_BEFORE_SCHOOL
> http_access deny !BOARDERS_ON_WEEKENDS
>>>
> 
> but the proxy still goes... and it shouldn't
> 
> where's my logic failing?
> 
> hmmm, thanks,
> Craig
> 
> 
> 
> 
> 
> 
> _______________________________________________
> DunLUG mailing list
> [email protected]
> http://lists.ethernal.org/listinfo/dunlug
> DunLUG Wiki - http://dunlug.kallisti.net.nz/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlFnPwsACgkQ/9hyErrk+j4+vgCfUzrfVm7eX/tSSzoSrHvM2d+q
pYIAnROEzfxvfq6ul7zvWjRzjsDIRhqC
=aeHZ
-----END PGP SIGNATURE-----

_______________________________________________
DunLUG mailing list
[email protected]
http://lists.ethernal.org/listinfo/dunlug
DunLUG Wiki - http://dunlug.kallisti.net.nz/