Silly Question about Squid

moekad · 02-22-2009, 07:40 PM

hey
how are you all!
i know it's silly question but i didn't work with me
i wanna to ristrict site like youtube from 12:00 am to 09:00 am
i type in squid.conf
acl src 192.168.0.0/24
acl timeon time 00:00-09:00
acl sites dstdomain .yahoo

http_access deny sites
http_access allow src timeon

didn't work any clue
Thanks for your help.

chitambira · 02-23-2009, 05:10 AM

Quote:

acl src 192.168.0.0/24

you need to give your acl a name like
acl mynetwork src 192.168.0.0/24

Quote:

acl sites dstdomain .yahoo

should be like:
acl sites dstdomain .yahoo.com

Quote:

http_access deny sites
http_access allow src timeon

it therefore should look like
http_access deny sites
http_access allow mynetwork timeon

However, best practice is to deny enemies outright -->allow friends -->deny anyone unknown by default:
http_access deny sites
http_access allow mynetwork timeon
http_access deny all

SonJelfn · 02-23-2009, 05:39 AM

Hello,

Did chitambira's post work like you wanted?

I haven't used Squid in a while, but it feels as with this ACL configuration:

Code:

http_access deny sites
http_access allow mynetwork timeon
http_access deny all

It would deny whatever you put in the ACL "sites" no matter what and only allow access from your network in "mynetwork" only at "timeon"

I think that fixing the ACL definitions as chitambira pointed out and then using this configuration would get the desired result:

Code:

http_access deny sites timeon
http_access allow mynetwork
http_access deny all

Hope it works. Make sure to tell us if it works out.

Good luck

chitambira · 02-23-2009, 09:30 AM

Quote:

http_access deny sites
http_access allow mynetwork timeon
http_access deny all

was purely demonstrating best practice and syntax here, otherwise for the actual requirements(which are not clear here) however assuming that moekad want to RESTRICT access to PARTICUALR sites TO: btwn 12 midnite and 9am, then the acl should look like:

Quote:

acl mynetwork src 192.168.0.0/24
acl businesstime time 09:00-24:00
acl sites dstdomain restricted.txt

http_access deny sites businesstime
http_access allow mynetwork
http_access deny all

the file restricted.txt should contail a list of all domains that have to be restricted

moekad · 02-24-2009, 09:45 AM

Quote:

Originally Posted by chitambira

was purely demonstrating best practice and syntax here, otherwise for the actual requirements(which are not clear here) however assuming that moekad want to RESTRICT access to PARTICUALR sites TO: btwn 12 midnite and 9am, then the acl should look like:

the file restricted.txt should contail a list of all domains that have to be restricted

//////////
hey
Thanks all it work =)
Regards, KAD