On Wed, 10 Mar 2004, Payal Rathod wrote:

> Ok. Maybe you are right. But then what is the correct acl list I have to
> use?

If you want to block something without requesting a new login then the 
last acl on your deny line needs to be something else than a proxy_auth 
acl type. Squid "magically" asks for a new login if the request is denied 
by a proxy_auth acl.

This will automatically request a new login:

http_access deny ... proxy_auth_based_acl

This will not:

http_access deny ... proxy_auth_based_acl ...


If you do not find a logical ACL to place last then you can always use the 
"all" acl.

http_access deny ... proxy_auth_based_acl all

> >From my last mail,
> 1078930602.788     95 192.168.10.20 TCP_IMS_HIT/304 211 GET
> http://www.relianceinfo.com/Infocomm/swf/vars10.txt shilpa NONE/-
> text/plain
> 
> I think I haven't used acl logically. Any ideas on it?

This request was allowed.

Regards
Henrik

Reply via email to