On Tue, 16 Mar 2004 [EMAIL PROTECTED] wrote: > Hello again, Henrik! > > acl subgroup src 120.202.200.7 > acl rionet src 120.202.200.0/255.0.0.0 > > acl morning time SMTWHFA 08:30-12:30 > acl afternoon time SMTWHFA 13:30-18:30 > > acl denied_ext url_regex \.zip$ > acl denied_ext url_regex \.midi$ \.wav$ > acl denied_ext url_regex \.mpe?ga$ \.mp[23]$ \.m3u$ \.r[am]$ \.r[ap]m$ > acl denied_ext url_regex \.mp[eg]$ \.mpeg$ \.qt$ \.mov$ .avi$ > acl denied_ext url_regex \.exe$ \.com$ \.bin$ \.scr$ \.dll$ \.EXE$ \.Exe$ > acl allowed_ext url_regex hotmail.com$ webmail.exe$ iname.com$ > > http_access allow subgroup > http_access allow rionet allowed_ext > http_access deny rionet denied_ext morning > http_access deny rionet denied_ext afternoon > http_access allow rionet > http_access allow localhost > http_access deny all > > I had no success...... :-( > > IP 120.202.200.7 still doesn't have rights to download a .exe file, for > example.....
I see nothing wrong with the access controls for subgroup above, and from what can be read in this message it should work. Try "squid -k parse" and to restart your Squid. The rionet acl is not correctly defined. The netmask does not match the address and "squid -k parse" will warn you about this. What you have typed is identical to "acl rionet src 120.0.0.0/8" and I am not entirely sure this is what you intended.. Regards Henrik
