Hi Rakesh, Hmmm.. Looks like it should work? Try removing the ACL 'NOSITE' and replacing
http_access deny NOSITE with http_access deny all Andrew. -----Original Message----- From: rakesh [mailto:[EMAIL PROTECTED] Sent: Wednesday, 24 September 2003 20:30 To: [EMAIL PROTECTED] Subject: [squid-users] Squid Authentication Hi, I have been running the squid proxy quite well with restricted access. Now I have added three lines (1,2&3) in the configuration for getting authentication from NT domain, though the authentication works ok but the user can go to any site. The restriction defined by acl name BBHOME does not work. Can some one explain why and what is remedy. See the configuration below: 1. auth_param basic program /usr/local/squid/libexec/msnt_auth NT_dom 2. acl RAKESH proxy_auth REQUIRED acl BBHOME dstdomain .nai.com acl BBHOME dstdomain .mcafeeb2b.com acl BBHOME dstdomain a64.g.akamai.net ################## acl myhost dst 168.187.148.226/255.255.255.255 acl myhost dst www.webimmune.net acl NOSITE dstdomain 0.0.0.0/0.0.0.0 acl all src 0.0.0.0/0.0.0.0 #################### http_access allow localhost http_access allow BBHOME 3. http_access allow RAKESH http_access allow myhost http_access deny NOSITE Cheers, Rakesh Jha ############################################################################ ######### DISCLAIMER Any non-official business related views, opinions and other information presented in this electronic mail are solely those of the sender/author. Burgan Bank does not endorse or accept responsibility for these opinions, views or conclusions. If you are not the addressee indicated in this electronic mail or responsible for delivering this electronic message to the inteded recipient, you should delete this message and notify the sender immediately. Burgan Bank ############################################################################ ######### ____________________________________________________________________ CAUTION - This message may contain privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that any use, dissemination, distribution or reproduction of this message is prohibited. If you have received this message in error please notify Air New Zealand immediately. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of Air New Zealand. _____________________________________________________________________ For more information on the Air New Zealand Group, visit us online at http://www.airnewzealand.com _____________________________________________________________________
