Monday, May 28, 2007

Squid Configuration

Access list

1] for workstations (allow only mynetwork address)

acl mynetwork src 192.168.2.0/255.255.255.0
http_access allow mynetwork

2] for sites (ban friendster.com or regex listed in a file)

acl bannedsites url_regex -i ^http://www.friendster.com/
or
acl bannedsites url_regex -i "/etc/squid/bad-sites"
then
http_access deny bannedsites

place http_access below the workstations allow

example of content of "bad-sites"
pokemon
friendster
pornograp

3] for filesize (limits download of files to 3 MB during periods listed below)

acl morning time MTWHFA 9:00-11:00
acl afternoon time MTWHFA 9:00-11:00

reply_body_max_size 3000000 allow morning
reply_body_max_size 3000000 allow afternoon



No comments: