Koozali.org: home of the SME Server

SQUID ACLs in v5

Steve Leeke

SQUID ACLs in v5
« on: November 13, 2001, 05:02:04 PM »
Is there something different about SQUID in v5?

I've used the same squid.conf in v4 and v5 and in v4 it does what I want (blocks domains and IPs not on the lists), but in v5 it blocks everything.

The squid.conf is below.  Any help would be greatly appreciated.

Steve

#------------------------------------------------------------
# DO NOT MODIFY THIS FILE! It is updated automatically by the
# March Networks server software. Instead, modify the source
# template in the /etc/e-smith/templates directory. For more
# information, see http://www.e-smith.org/.
#
# copyright (C) 2001 Mitel Networks Corporation
#------------------------------------------------------------


acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localsrc src 127.0.0.1 192.168.1.0/255.255.255.0
acl localdst dst 127.0.0.1 192.168.1.0/255.255.255.0
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535 980
acl CONNECT method CONNECT
acl webdav method PROPFIND TRACE PURGE PROPPATCH MKCOL COPY MOVE LOCK UNLOCK


acl filtered_domains dstdomain "/var/log/squid/domains/new/filtered_domains.txt"
acl filtered_IPs dst "/var/log/squid/domains/new/filtered_IPs.txt"

cache_mgr admin@leeke.net
ftp_user nobody@leeke.net

http_access allow manager localsrc
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

#http_access allow localsrc

http_access allow filtered_domains
http_access allow filtered_IPs

http_access deny all

icp_access allow all
miss_access allow all

store_avg_object_size 3 KB
always_direct allow webdav

# These squid settings set up transparent proxying - as
# long as a packet redirector is also set up to forward
# port 80 TCP connections into squid.

httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on