Re: squid config puzzle

hmmm, I'll have to get my head around that after lunch..

Thanks!
Craig



On Fri, Apr 12, 2013 at 10:54 AM, Alex King <[email protected]> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> It depends on what other http_access rules appear before and after the
> ones you list.
>
> If your config was doing its job, no-one would be able to connect.  The
> way it's written, the time has to be simultaneously before school, after
> school and in the weekends, which is impossible in my universe.
>
> To do it right with the same acls, you would need:
>
> > http_access accept BOARDERS_ON_AFTER_SCHOOL
> > http_access accept BOARDERS_ON_BEFORE_SCHOOL
> > http_access accept BOARDERS_ON_WEEKENDS
>
> but since I assume you need/want to use denys here, alternatively:
>
> http_access deny DURING_SCHOOLTIME
> http_access deny DURING_NIGHTTIME
>
> would also work with appropriate acls for DURING_SCHOOLTIME and
> DURING_NIGHTTIME.
>
> Cheers,
> Alex
>
> On 12/04/13 10:33, Craig Knights wrote:
> > OK,  I'm doing something silly..
> >
> > I'm trying to time restrict a proxy..
> >
> > this from my squid.conf
> >
> >>>
> > acl BOARDERS_ON_AFTER_SCHOOL time MTWTF 15:30-23:00
> > acl BOARDERS_ON_BEFORE_SCHOOL time MTWTF 07:00-08:30
> > acl BOARDERS_ON_WEEKENDS time SA 07:00-23:00
> >
> >
> > http_access deny !BOARDERS_ON_AFTER_SCHOOL
> > http_access deny !BOARDERS_ON_BEFORE_SCHOOL
> > http_access deny !BOARDERS_ON_WEEKENDS
> >>>
> >
> > but the proxy still goes... and it shouldn't
> >
> > where's my logic failing?
> >
> > hmmm, thanks,
> > Craig
> >
> >
> >
> >
> >
> >
> > _______________________________________________
> > DunLUG mailing list
> > [email protected]
> > http://lists.ethernal.org/listinfo/dunlug
> > DunLUG Wiki - http://dunlug.kallisti.net.nz/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.12 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAlFnPwsACgkQ/9hyErrk+j4+vgCfUzrfVm7eX/tSSzoSrHvM2d+q
> pYIAnROEzfxvfq6ul7zvWjRzjsDIRhqC
> =aeHZ
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> DunLUG mailing list
> [email protected]
> http://lists.ethernal.org/listinfo/dunlug
> DunLUG Wiki - http://dunlug.kallisti.net.nz/
>

_______________________________________________
DunLUG mailing list
[email protected]
http://lists.ethernal.org/listinfo/dunlug
DunLUG Wiki - http://dunlug.kallisti.net.nz/