On Sun, Mar 14, 2004 at 03:06:54PM -0300, [EMAIL PROTECTED] wrote: > I have the following configuration: > > acl rionet src 120.202.200.0/255.0.0.0 > acl morning time SMTWHFA 08:30-12:30 > acl afternoon time SMTWHFA 13:30-18:30 > acl denied_ext url_regex \.zip$ > acl denied_ext url_regex \.midi$ \.wav$ > acl denied_ext url_regex \.mpe?ga$ \.mp[23]$ \.m3u$ \.r[am]$ \.r[ap]m$ > acl denied_ext url_regex \.mp[eg]$ \.mpeg$ \.qt$ \.mov$ \.avi$ > acl denied_ext url_regex \.exe$ \.com$ \.bin$ \.scr$ \.dll$ \.EXE$ \.Exe$ > acl allowed_ext url_regex hotmail.com$ webmail.exe$ iname.com$ > > http_access allow rionet allowed_ext > http_access deny rionet denied_ext morning > http_access deny rionet denied_ext afternoon > http_access allow rionet > http_access allow localhost > http_access deny all > > How do I give total access to a sub-group of the IP range declared in > rionet, i.e., IPs 120.202.200.20 and 120.202.200.25 have unrestricted > access.
The order of the ACLs matters. Just add another ACL on top of the other http_access definitions like this: acl subgroup src 120.202.200.20 acl subgroup src 120.202.200.25 http_access allow subgroup If the list is longer you could as well link to an external file like... acl subgroup src "/etc/squid/subgroup.src" ...and list the IPs there. Christoph -- ~ ~ ".signature" [Modified] 3 lines --100%-- 3,41 All
