LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 11-22-2005, 07:43 PM   #1
mago
Member
 
Registered: Apr 2004
Location: Costa Rica
Distribution: slack current with 2.6.16.18 (still off the hook)
Posts: 284

Rep: Reputation: 33
Squid problem with http_access and time acl


Hi,

I recently installed and configure squid and every thing went pretty well until I needed to add some time restrictions.

I got the time acl set to point to a file, and the ip range of the group I need to restrict but when I concatenate them it just ignore me.

Here it is the extract of the squid.conf
Code:
acl max src 192.168.1.203/32
acl stage src 192.168.1.100-192.168.1.110/32
acl clerks src 192.168.1.111-192.168.1.150/32
acl manage src 192.168.1.151-192.168.1.200/32
acl prog src 192.168.1.201-192.168.1.220/32
acl design src 192.168.1.221-192.168.1.230/32
acl rush time "/etc/squidacl/times.txt"


http_access allow !rush max
http_access allow design
http_access allow prog
http_access allow manage
http_access allow stage
http_access allow !rush clerks

http_access deny all
For what I googled this seems to be fine but it just doesn't work

The squid and the machines had the same time zone and all of them syncronize with the same ntp server.


Please drop a line with any ideas or suggestions.
 
Old 11-25-2005, 01:11 PM   #2
amitsharma_26
Member
 
Registered: Sep 2005
Location: New delhi
Distribution: RHEL 3.0/4.0
Posts: 777

Rep: Reputation: 31
I think you just want to block or grant access timewise.


Access list format :
acl name time [day-list] [start_hour:minute-end_hour:minute]

[day-list] -->SMTWHFA
S - Sunday M - Monday T - Tuesday W - Wednesday H - Thursday F - Friday A - Saturday

acl night time 17:00-24:00
acl early_morning time 00:00-6:00

Ending time(hour) can never be smaller than starting time.. So in those cases, take 24 hour time clock.
----
acl weekends time SA

For example :

acl myNet src 192.168.55.0/255.255.255.0
acl workdays time MTWHF
# allow web access only on the weekends!
http_access deny workdays
http_access allow myNet

I think now you must have got a good idea n would easily implement it for your needs.

Need some more support.
Feedback.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid : Time ACL problem ikillu Linux - Networking 4 07-18-2005 02:44 PM
set time acl and custom message squid cgelectek Linux - Software 1 06-25-2005 11:17 AM
Squid ACL - what happens when a user go goes past their allowed access time? Grizzlednewbie Linux - Software 0 07-07-2004 12:37 AM
squid acl problem aigartua Linux - Software 1 12-08-2003 09:03 AM
squid acl - time statement xscousr Linux - Networking 4 08-08-2003 12:12 AM


All times are GMT -5. The time now is 11:14 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration