squid issue

Taking care of your Linux box.
Post Reply
ghulam yaseen
Naik
Posts: 68
Joined: Thu Aug 07, 2008 6:09 pm
Location: karachi

squid issue

Post by ghulam yaseen »

Hello All,

I am running a squid server based on SUSE. I wanted to implement time ranges for users who use Internet through this server. I was able to implement time restriction on one system but when i implement the restriction on multiple systems, it read the one at a time.

The acl looks like this

acl james src 192.168.100.126 / 255.255.255.0
acl jacob src 192.168.100.146 / 255.255.255.0
acl all src 0.0.0.0 / 0.0.0.0
acl lunch time M T W H F 18:00-20:00
acl lunch1 time M T W H F 12:00-18:00
http_access allow james lunch
http_access allow jacob lunch1
http_access deny all

Any idea on where is the issue in this acl.......


regards,
Ghulam Yaseen
lambda
Major General
Posts: 3452
Joined: Tue May 27, 2003 7:04 pm
Location: Lahore
Contact:

Post by lambda »

the problem here is very simple: you don't understand netmasks. 255.255.255.0 is not some magical text you add to each ip. your two ip acls apply to the whole 192.168.100 network, not to the two individual ips.

change

192.168.100.126 / 255.255.255.0
192.168.100.146 / 255.255.255.0

to

192.168.100.126
192.168.100.146

don't blindly copy and paste stuff. try to understand what you're doing.
Watch out for the Manners Taliban!
Isn't it amazing how so many people can type "linuxpakistan.net" into their browsers but not "google.com"?
ghulam yaseen
Naik
Posts: 68
Joined: Thu Aug 07, 2008 6:09 pm
Location: karachi

squid issue

Post by ghulam yaseen »

thanks lambda,
lambda wrote:the problem here is very simple: you don't understand netmasks. 255.255.255.0 is not some magical text you add to each ip. your two ip acls apply to the whole 192.168.100 network, not to the two individual ips.

change

192.168.100.126 / 255.255.255.0
192.168.100.146 / 255.255.255.0

to

192.168.100.126
192.168.100.146

don't blindly copy and paste stuff. try to understand what you're doing.
:D
Post Reply