[squid-users] Skype issue

Amos Jeffries squid3 at treenet.co.nz
Thu Jun 4 14:01:23 UTC 2015


On 5/06/2015 1:26 a.m., Jonathan Filogna wrote:
> And if i want to make exceptions to memberships on AD, how can i do it?
> That's what i need.

You can do it two ways.

A) place the "!administrador" test on the end of each of the skype deny
lines.

B) place an "allow administrador" line above the skype rules


In both cases remove the two custom administrador related lines you have
now, and move the skype rules down below your "deny !ntlm" line and
above the "allow ntlm" line.

Like so:

  http_access deny !Safe_ports
  http_access deny CONNECT !SSL_ports
  http_access allow manager webserver
  http_access deny manager
  acl ntlm proxy_auth REQUIRED
  http_access deny !ntlm

 # (for the A way)
  http_access deny numeric_IPS !administrador
  http_access deny Skype_UA !administrador
  http_access deny !validUserAgent !administrador

# (for the B way)
  http_access allow administrador
  http_access deny numeric_IPS
  http_access deny Skype_UA
  http_access deny !validUserAgent


  http_access allow ntlm
  http_access deny all

Amos



More information about the squid-users mailing list