I didn't see anyone explain this (I may have missed it though)
so I'll attempt to explain it myself for you.

IIRC the components of an acl declaration         are OR'ed
 and the components of an http_access declaration are AND'ed
( I hope I don't have these backward! )

So, if I may alter your configuration as an example:

> acl acl1 src claudiu.altex.ro caesar.altex.ro

   This acl would be satisfied if access was from 
   host caludiu OR caesar.  Notice how I didn't say
   that it grants access.  It doesn't.  It is simply
   giving a name to a certain kind of condition.
   Here is some pseudo-code, that might clarify things:

   IF access is from claudiu.altext.ro OR caesar.altext.ro
      THEN LET acl1 = TRUE

> http_access allow acl1 acl2
              ^^^^^
   This will "allow" access if acl1 AND acl2 are true.
   If either acl1 or acl2 are false, then this statement is
   skipped (access is neither granted nor denied), instead
   processing will continue with the next http_access
   statement.

> http_access deny all

   And for this one, think of the all keyword as TRUE.

A pretty good mailing list for squid is the squid mailing
list.  Imagine that!  Check out this URL:

http://www.squid-cache.org/mailing-lists.html

Good luck!


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to