Re: [squid-users] acl dstdomains does not block!

2009-04-08 Thread Leslie Jensen
Amos Jeffries skrev: Um, the config you showed simplifies down to: allow localhost access anywhere. deny anything else. Period. I think you want: # # If we want to block certain sites. # # acl blockedsites dstdomain .aftonbladet.se. acl blockedsites dstdomain .squid-cache.org

Re: [squid-users] acl dstdomains does not block!

2009-04-07 Thread Amos Jeffries
Leslie Jensen wrote: 2009/4/6 Leslie Jensen les...@eskk.nu Leslie Jensen wrote: Hello My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I can't get the folowing to work. # acl blocked_sites dstdomain .aftonbladet.se. acl blocked_sites dstdomain

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Leslie Jensen
Leslie Jensen wrote: Hello My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I can't get the folowing to work. # acl blocked_sites dstdomain .aftonbladet.se. acl blocked_sites dstdomain /usr/local/etc/squid/dstdomain deny_info ERR_ACCESS_DENIED blocked_sites

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Bharath Raghavendran
Were you testing it with a non-localhost client? The only line i can see that can affect it is http_access allow localhost .. which means localhost gets access irrespective of the http_access directives that come after this one. btw, although this is not related to the problem, you have

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Pandu E Poluan
I see that the very first http_access is this: http_access allow localnet That means all requests coming from the localnet will be allowed. Assuming you've set localnet correctly (i.e. the IP address range covers your LAN), then that rule practically allows every URL; the http_access

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Pandu E Poluan
Or, alternatively, place http_access allow localhost *AFTER* http_access deny blockedlist That should do the trick, methinks. Rgds. [p] Bharath Raghavendran wrote: Were you testing it with a non-localhost client? The only line i can see that can affect it is http_access allow localhost ..

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Leslie Jensen
2009/4/6 Leslie Jensen les...@eskk.nu Leslie Jensen wrote: Hello My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I can't get the folowing to work. # acl blocked_sites dstdomain .aftonbladet.se. acl blocked_sites dstdomain /usr/local/etc/squid/dstdomain

[squid-users] acl dstdomains does not block!

2009-04-03 Thread Leslie Jensen
Hello My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I can't get the folowing to work. # acl blocked_sites dstdomain .aftonbladet.se. acl blocked_sites dstdomain /usr/local/etc/squid/dstdomain deny_info ERR_ACCESS_DENIED blocked_sites

Re: [squid-users] acl dstdomains does not block!

2009-04-03 Thread Merdouille
I'm not sure but i use a dstdomain acl with a file like this : .google.com without last dot Or an bad usage or order of acl allow/deny your_acl -- View this message in context: http://www.nabble.com/acl-dstdomains-does-not-block%21-tp22863222p22864630.html Sent from the Squid - Users mailing

Re: [squid-users] acl dstdomains does not block!

2009-04-03 Thread Amos Jeffries
Leslie Jensen wrote: Hello My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I can't get the folowing to work. # acl blocked_sites dstdomain .aftonbladet.se. acl blocked_sites dstdomain /usr/local/etc/squid/dstdomain deny_info ERR_ACCESS_DENIED blocked_sites