BlogJava-kooyee ‘s blog-随笔分类-Softwarehttp://www.blogjava.net/Javawind/category/26387.htmlzh-cnSat, 06 Oct 2007 15:30:35 GMTSat, 06 Oct 2007 15:30:35 GMT60[Squid] squid tiphttp://www.blogjava.net/Javawind/archive/2007/10/06/150756.htmlkooyeekooyeeSat, 06 Oct 2007 14:43:00 GMThttp://www.blogjava.net/Javawind/archive/2007/10/06/150756.htmlhttp://www.blogjava.net/Javawind/comments/150756.htmlhttp://www.blogjava.net/Javawind/archive/2007/10/06/150756.html#Feedback0http://www.blogjava.net/Javawind/comments/commentRss/150756.htmlhttp://www.blogjava.net/Javawind/services/trackbacks/150756.htmlIn access contorl list

acl all src 0.0.0.0/0.0.0.0

acl  target dst 192.168.0.1

http_access deny target
http_access allow all

it mean allow all user clinet to access internet but all user deny to access the 192.168.0.1

but
http_access allow all
http_access deny target
mean all user clinet to access internet not block any site.

if want to deny the access for a src group (i.e. clinet user), it need to indicate "http_access deny" before "http_access allow".

kooyee 2007-10-06 22:43 发表评论
]]>