Squid Configuration
Access list
1] for workstations (allow only mynetwork address)
acl mynetwork src 192.168.2.0/255.255.255.0
http_access allow mynetwork
2] for sites (ban friendster.com or regex listed in a file)
acl bannedsites url_regex -i ^http://www.friendster.com/
or
acl bannedsites url_regex -i "/etc/squid/bad-sites"
then
http_access deny bannedsites
place http_access below the workstations allow
example of content of "bad-sites"
pokemon
friendster
pornograp
3] for filesize (limits download of files to 3 MB during periods listed below)
acl morning time MTWHFA 9:00-11:00
acl afternoon time MTWHFA 9:00-11:00
reply_body_max_size 3000000 allow morning
reply_body_max_size 3000000 allow afternoon
No comments:
Post a Comment