Re: Missing something in this Squid ACL chain...

On Sat, 09 Oct 2004 09:29:34 -0700, Grishnav <[email protected]> wrote:

> Which brings me to another question, actually. In the current setup,
> what would I need to do to add another host? The revelant squid section
> is a bit unclear, but it looks as if just adding another
> 
> acl blocked 192.168.x.x/255....
> 
> should work?

It won't.  Blocked isn't a keyword, it's the name of the acl rule
you're declaring.  If you declare two rules with the same name, only
the second will actually get applied.

To block more than one host, you need to either come up with a rule
that describes them both or declare (and enforce) multiple rules.  If
you're going to be doing very much of this, it will pay off quickly to
look at Squid's syntax for matching from an external file:

acl rulename "filename"

You'll need the quotes around the name of the file.  That file can
consist of multiple acl declarations that you can then enforce under
one name.

HTH,

Dylan