Re: [squid-users] ACLs allow/deny logic

2017-06-27 Thread Alex Rousskov
On 06/27/2017 12:31 AM, Vieri wrote: > http_access deny denied_restricted1_mimetypes_req > !allowed_restricted1_domains !allowed_restricted1_ips > http_reply_access deny denied_restricted1_mimetypes_rep > !allowed_restricted1_domains !allowed_restricted1_ips > http_access deny intercepted !local

Re: [squid-users] ACLs allow/deny logic

2017-06-26 Thread Vieri
Please bear with me because I still don't quite grasp the AND logic with ACLs. Let's consider the logic "http_access deny (if) X (and) Y (and) Z" and the following squid configuration section: [squid.conf - start] acl denied_restricted1_mimetypes_req req_mime_type -i "/usr/local/proxy-settings/

Re: [squid-users] ACLs allow/deny logic

2017-06-26 Thread Vieri
From: Amos Jeffries >> I'd like to allow by default and deny only according to the ACLs I define. >> >> Here's an example with Telegram. I'd like to deny all >> application/octet-stream mime types in requests >> and replies except for a set of IP addresses or

Re: [squid-users] ACLs allow/deny logic

2017-06-26 Thread Amos Jeffries
On 26/06/17 20:46, Vieri wrote: Hi, I'd like to allow by default and deny only according to the ACLs I define. Here's an example with Telegram. I'd like to deny all application/octet-stream mime types in requests and replies except for a set of IP addresses or domains. Er, deny is the opposi

[squid-users] ACLs allow/deny logic

2017-06-26 Thread Vieri
Hi, I'd like to allow by default and deny only according to the ACLs I define. Here's an example with Telegram. I'd like to deny all application/octet-stream mime types in requests and replies except for a set of IP addresses or domains. acl denied_restricted1_mimetypes_req req_mime_type -i "/