Re: netmask

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 23 Sep 1998 23:27:16 +0200

Speedy Juggler wrote:
>
> Hello,
>
> The problem with eth0:0 is solved, thanx...
> Now I want only to allow my 3 local networks to use the proxy.
> There is a client_netmask, I hoped I could use that one

Nope. That is only for masking the host identity from the logs to
maintain privacy.

> , but
> I need 3 netmasks, or something else, I could also use
> a firewall with ipfwadm, but I'd like people to get an error
> message in there lynx or netscape :)))

What you need to use is ACL lists to http_access.

acl localnets src 147.243.25.0/255.255.255.0
147.243.26.64/255.255.255.192
acl localhost src 127.0.0.1
acl all src 0/0

http_access allow localnets
http_access allow localhost
http_access deny all

---
Henrik Nordström
Sparetime Squid Hacker
Received on Wed Sep 23 1998 - 15:16:24 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:42:11 MST