Hi there!
Hope You guys can help me with this one.

Concern 1:

I finally got Squid to work. It´s working but very simple. And I´d like to know a bit more about access control lists to make it run more flexible and powerful.

Here´s something I´ve been wondering... On my work I´d like to prohibit access to a lot of sites, sites that contain sexual/porn content, sites that potentially can be hazardous to my network (the users go clickin´ regardless. Wich is very bad). And I would like to limit sites as Orkut, for example, during worktime. Some workers can fail productivity by visiting those sites without any kind of access policy.

So what I´d like to do is:

- Not allow access to sites with sexual content and potential network hazard (virus, trojand etc): Permanently.

- Not allow access to sites like orkut : During workhours.

-----------------------------------------------------------------------

Concern 2:

I´d like to specify some IP´s (2 or 3) within this same network that can access Orkut regardless. These can access those sites without blocking, but still they have to be blocked to access sites with potential hazard to the network...

Thanks in advance.

have you lookined into using DansGuardian, works great with squid, and has a anti-virus module and webmin module. also there is a exeption file in dansguardain that will allow anyone on that ip-address to bypass all security settings.