<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hello.<o:p></o:p></p>
<p class="MsoNormal">I’m trying to create an ACL browser type to allow any User-Agent header with the string iPhone. I have tried this ACL various ways and cannot get it to work. Any help with the correct setup and/or regexp would be much appreciated. I have
the ACL’s commented out as when they are enabled, everything is allowed to pass without hitting the authentication.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">### MY ACL’s<o:p></o:p></p>
<p class="MsoNormal">acl iphone1 browser [(.*)(iPhone)(.*)]<o:p></o:p></p>
<p class="MsoNormal">acl iphone2 browser [.*\QiPhone\E.*]<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">### ACCESS.LOG<o:p></o:p></p>
<p class="MsoNormal">sc.iasds01.com xxx.xxx.xxx.xxx - - [20/Nov/2015:15:12:26 -0600] "CONNECT sc.iasds01.com:80 HTTP/1.1" 200 172 "-" "Mozilla/5.0 (<span style="background:yellow;mso-highlight:yellow">iPhone</span>; CPU iPhone OS 9_0 like Mac OS X) AppleWebKit/601.1.46
(KHTML, like Gecko) Version/9.0 Mobile/13A344 Safari/601.1" TCP_TUNNEL:HIER_DIRECT<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">### squid.conf<o:p></o:p></p>
<p class="MsoNormal">auth_param basic program /usr/lib64/squid/basic_ncsa_auth /etc/squid/squid_passwd<o:p></o:p></p>
<p class="MsoNormal">acl iphone1 browser [(.*)(iPhone)(.*)]<o:p></o:p></p>
<p class="MsoNormal">acl iphone2 browser [.*\QiPhone\E.*]<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">acl ncsa_users proxy_auth REQUIRED<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">http_access allow manager localhost<o:p></o:p></p>
<p class="MsoNormal">#http_access allow iphone1<o:p></o:p></p>
<p class="MsoNormal">#http_access allow iphone2<o:p></o:p></p>
<p class="MsoNormal">http_access allow ncsa_users<o:p></o:p></p>
<p class="MsoNormal">http_access deny all<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<hr>
<p style="font-family:arial;font-size:8px;"><b>Piper Jaffray & Co. Since 1895. Member SIPC and NYSE. Learn more at www.piperjaffray.com. Piper Jaffray corporate headquarters is located at 800 Nicollet Mall, Minneapolis, MN 55402.</p>
</b>
<p></p>
<p style="font-family:arial;font-size:8px;">Piper Jaffray outgoing and incoming e-mail is electronically archived and recorded and is subject to review, monitoring and/or disclosure to someone other than the recipient. This e-mail may be considered an advertisement
or solicitation for purposes of regulation of commercial electronic mail messages. If you do not wish to receive commercial e-mail communications from Piper Jaffray, go to: www.piperjaffray.com/do_not_email to review the details and submit your request to
be added to the Piper Jaffray "Do Not E-mail Registry." For additional disclosure information see www.piperjaffray.com/disclosures</p>
</body>
</html>