���� ������. ���� ������ � ������������. ������� ��������� ����������� ��� ������������ IP-������� ( ��� ���� ) ����� ��������� ������� : ## # ACLs - currently: urlregex, urlpath, usercharset # port, dstdom, dstdom_regex, src_ip, time # each acl can be loaded from file. ## #acl CACHEABLECGI urlregex http://www\.topping\.com\.ua/cgi-bin/pingstat\.cgi\?072199131826 #acl WWWPACO urlregex www\.paco\.net #acl NO_RLH urlregex zipper #acl REWRITEPORTS urlregex (www.job.ru|www.sale.ru) #acl REWRITEHOSTS urlregex (www.asm.ru|zipper\.paco) #acl WINUSER usercharset windows-1251 #acl DOSUSER usercharset ibm866 #acl UNIXUSER usercharset koi8-r #acl RUS dstdom ru su #acl UKR dstdom ua #acl BADPORTS port [0:79],110,138,139,513,[6000:6010] #acl BADDOMAIN dstdom baddomain1.com baddomain2.com #acl BADDOMREGEX dstdom_regex baddomain\.((com)|(org)) acl ADMIN_HOST src_ip 192.168.199.1 acl LOCAL_DEST dstdom dor.inside acl ALL_DEST dstdom * #acl ALL_NET dst_ip 0.0.0.0/0 acl LOCAL_NETWORKS src_ip include:/usr/local/etc/oops/acl_local_networks #acl BADNETWORKS src_ip 192.168.10/24 #acl WORKTIME time Mon,Tue:Fri 0900:1800 acl ADMINS src_ip 127.0.0.1 192.168.199.1 acl PURGE method PURGE ## # acl_deny [!]ACL [!]ACL ... # deny access for combined acl ## acl_deny PURGE !ADMINS group admin { networks_acl ADMIN_HOST; networks_acl ALL_DEST; badports [0:79],110,138,139,513,[6000:6010] ; http { allow dstdomain *; } } group local { networks_acl LOCAL_NETWORKS !ADMIN_HOST; networks_acl LOCAL_DEST ; badports [0:79],110,138,139,513,[6000:6010] ; miss allow; redir_mods redir; http { allow dstdomain * ; } } group users { networks_acl LOCAL_NETWORKS !ADMIN_HOST !BAD_NETWORKS; networks_acl !LOCAL_DEST ; badports [0:79],110,138,139,513,[6000:6010] ; miss allow; auth_mods passwd_file; redir_mods redir; http { allow dstdomain * ; } } group world { networks 0/0; badports [0:79],110,138,139,513,[6000:6010]; http { deny dstdomain * ; } icp { deny dstdomain * ; } } -------------------------------------------------- �� ���-�� ����� ����������� - ����� ����� oops ������� ����������� ��� � ��� ��������� ��������, � �� �������� ��� ��� ������ � �� �������. ������ � ��� ������. -- WBR, Serge Lisin ===================================================================== If you would like to unsubscribe from this list send message to [EMAIL PROTECTED] with "unsubscribe oops" in message body. Archive is accessible on http://www.paco.net/oops/
