Configuring squid for limited sites

shahz · 02-13-2008, 12:58 AM

I want to configure my squid to give access for limited sites. what is required to do this.

thanks

garyalex · 02-13-2008, 02:26 AM

http://www.squid-cache.org/Doc/

That is the link for full squid documentation.

You would need a few simple acls and http_access statements in your squid.conf:

Code:

acl mysite1 dstdomain .example.com
acl mysite2 dstdomain .someother.com
acl all src 0.0.0.0/0.0.0.0

http_access allow mysite1
http_access allow mysite2
http_access deny all

shahz · 02-14-2008, 09:11 AM

well can I writte down all the sites within a text file and then how acl will look like.

garyalex · 02-15-2008, 01:25 AM

You would do the following then:

Code:

acl mysites dstdomain "/etc/squid/mysites.txt"
acl all src 0.0.0.0/0.0.0.0

http_access allow mysites
http_access deny all

Then edit /etc/squid/mysites.txt

Code:

.example.com
.somewhere.com

And so on...

shahz · 02-16-2008, 01:11 AM

thanks for the quick response, just one more thing and I will be finish with this issue, and the issue that if I hav two networks one 192.168.0 and 192.168.1 I want to allow the full access for the webs to 192.168.0 but want to restrict the other network just to limited sites, then how acl will look like.

thanks in advance

shahz

garyalex · 02-17-2008, 10:21 PM

You would modify like this:

Code:

acl mysites dstdomain "/etc/squid/mysites.txt"
acl all src 0.0.0.0/0.0.0.0
acl net1 src 192.168.0.0/255.255.255.0

http_access allow mysites
http_access allow net1
http_access deny all

shahz · 02-19-2008, 09:24 AM

If I apply the above acls then my second network can not browse any thing because I am denying http access to all and just allowing net1 which is my first network am I right.

thanks