[squid-users] deny website and allow it to specific Ip Address

its_my_style · 07-15-2010, 10:36 PM

hi..
Im working on Small Organization as a IT .our org has Squid Pxy Server. i did block some website by using below command in Squid.conf file so its has block entire users in my organinstionn

acl restrict dst-domain .my site - and its working properly..but i need to allow that site for specifi ip address

pls letme know how to do it

pls help

Sorry for my poor english

jlanawalt · 07-16-2010, 12:59 AM

Before the deny, set up an acl for the allowed IPs and then allow them to everywhere (or just have a rule allowing them just to the later-blocked dst-domain.)

acl unrestricted src xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
http_access allow unrestricted

Lots of other options are possible. See the acl examples on the squid wiki. I have an easier time understanding squidGuard's acl examples.

its_my_style · 07-16-2010, 06:44 AM

hi jlanawalt

im ok with your pls advice whthere below command is alos possible with it

1./usr/local/etc/..... Create a file name call 'unrestricted' and apply below segment to it. 'acl unrestricted src xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx' then save and close

2. after that open squid.conf and add
acl unrestricted src unrestricted
http_access allow unrestricted

if this is not possible could you have any idea to allow specific ips same like i told you.

pls advice

jlanawalt · 07-16-2010, 11:03 PM

Sorry, we must not be communicating. I'm having a hard time understanding what you wrote.

Something about a file... Is your other rule in a file? How does squid find your other rule that is blocking these sites? Where ever it is, just before that add the ACL I suggested. It has to be before and not on the same line, see:

http://wiki.squid-cache.org/SquidFaq...2BAC8-Or_logic

If you are now asking "how do I include external files into squid, that's a horse of a different color. Search the documentation and wiki for that answer.

its_my_style · 07-18-2010, 09:18 PM

hi jlanawalt

extremlly sorry for above reply,accually i need to allow restriced site by using below methord

1. create a file on diretory /usr/local/etc/ips.squid and add unblocked ips to that file

2. then open squid.conf file and add statemts as follows

acl unrestricted src "/usr/loca/ect/ips.txt
http_access allow unrestricted
Save close and restard the Services

but its not working so i need to now is there any methord to declear it or what is the wrong point in my order

pls advice