Hi all,

I have set up squid as a reverse proxy, and a proxy combined. This way it can serve internal clients, and external clients. To get this to work, I have to have the following:

http_access allow all

Without this, reverse-publishing will not work. However I have another rule that limits user access to the internet:

http_access allow UserGroup

An acl has been configure for this to work, and when I remove the "http_access allow all" it does, but reverse proxy stops working. When I put "http_access allow all" back in, reverse proxy starts working again, but normal proxy isn't restricting anymore (for obvious reasons). Can someone help me resolve this?

Thanks,
Pair

I think I might have answered my own question again . . . In case anyone is interested, or sees some problem with this:

1. Define an acl for your internal net:

acl InternalNet src 192.168.x.x/255.255.255.0

2. Add that src group into a NOT statement for the rule:

http_access allow UserGroup
http_access allow all !InternalNet

That seems to have worked. Still testing it though . . . Anyone see any issues with doing it this way?

Thanks,
Pair