[squid-users] Block a web just for a group inside another group, or how?

[Yuri]

Amos, you are as always deep and brief. I did not look carefully at the
list of rules;)


05.12.2017 5:16, Amos Jeffries пишет:
> On 05/12/17 11:59, erdosain9 wrote:
>> But, that's exactly the problem.
>>
>> Thats what i do.
>> I do a have this large group
>> i-full
>> and a small group with a few users from i-full, the small group is
>> called
>> i-restringidos.
>>
>> And put i-restringidos in the top... (as you can see in my config file)
>>
>> But, is not working. They can go trough the web i try to block.
>> If i delete the user from i-full, then yes, works... (the users then
>> is just
>> in i-restringidos).
>>
>
>
> So lets look at your config. These are the relevant lines:
>
> > http_access allow sin_autenticacion
> > http_access allow i-restringidos !restringidos
> > http_access allow i-limitado !dominios_denegados
> > http_access allow i-full !dominios_denegados
> > http_access allow localhost
>
>
> The first thing you do is ALLOW for anyone who can login. End of
> story. Nothing more to check, they are allowed.
>
> *otherwise* ... (for clients who are not authenticated) their group
> i-restringidos is checked. Group for a not-authenticated client is
> impossible. Go to next line.
>
> *otherwise* ... group i-limitado is checked. Group for a
> not-authenticated client is impossible. Go to next line.
>
> *otherwise* ... group i-full is checked. Group for a not-authenticated
> client is impossible. Go to next line.
>
> *otherwise* ALLOW if the client is on localhost.
>
>
>
> Do you understand what is going wrong there?
>
> Amos
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

-- 
"Some people, when confronted with a problem, think «I know, I'll use regular expressions.» Now they have two problems."
--Jamie Zawinsk

**************************
* C++: Bug to the future *
**************************


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 512 bytes
Desc: OpenPGP digital signature
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20171205/1d72e0e5/attachment.sig>