[squid-users] acl maxconn and max_user_ip config help please

[B. Henry]

I want to limit max simultanious connections for any user in group foo, and also limit how may different IPs they can have devices logged in from at any 
one time.

I've had squid3 working well with a very simple policy for years just allowing access from two different ip ranges, but now want to make my proxy server 
available to others. 
I have things working well with one group called foo listing some names, after using something very similar to the recommended minimum defaults. 

acl foo proxy_auth user1 dumbuser someoneelse

But when I add the lines below to try and set a limit for group fooI can not connect at all, get a connection denied error.
acl foo maxconn 15
acl foo max_user_ip -s 5
And these were the last httpaccess lines
http_access deny !foo
#http_access allow localnet
  
I am very new to anything other than some very basic configuration, so may be misunderstanding almost anything, so all help will be well received even if 
it just confirms something I thought.

Also if I want to make a more restrictive policy, i.e. fewer connections for folks not in group fooam I correct in thinking it would go before, the foo 
rule?
   I guess I'd either make another groupand give them access and change foo's access to allow insteal of deny, or is there a better way?
Sometimes I think I understand the basic rules about order and such pretty weell, but feel confused at the moment...lol
  
Actually my current working configuration has the allow localnet line above the foo acl line and 
 these as the last acl and httpaccess lines
http_access deny !foo
At this point should I have an allow all line since the httpaccess line for foo is deny, or should the last line always be deny all? Smoke started comming 
out of my ears trying to understand some of the explanation for that...
     
Thanks in advance for any and all help. 
BTW, I am stuck using 3.1.19 I think it is as my server is running ubuntu 12.04 for a bit still, i.e. I know some options have changed a bit since 
squid3.1.

-- 
     B.H.
   Registerd Linux User 521886

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 888 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160717/c2f52ed2/attachment-0001.sig>