Haɗa myportname da src na Squid tare da ACL daban-daban

Tsarin yana da kyau a kallo na farko:

acl team_a myportname 3128 src 198.51.100.0/24

Amma ma'anar ACL tana da nau'i ɗaya kawai. A nan myportname shine nau'in; ƙara kalmar src ba ta fara gwaji na biyu ba. Sauran kalmomin suna cikin jerin ƙimar nau'in farko. Wannan layin baya nuna “wannan mai sauraro da wannan cibiyar abokin ciniki”.

Ba kowane sharadi suna

Yi amfani da suna don soket ɗin sauraro da kuma ACL na tushe daban. Wannan ɗan yanki yana amfani da adireshin takardu, waɗanda dole ne a maye gurbinsu da adireshin da suka dace da turawa:

http_port 192.0.2.10:3128 name=team_a_port
acl team_a_port myportname team_a_port
acl team_a_clients src 198.51.100.0/24

http_access allow team_a_port team_a_clients
http_access deny all

Sanya dokar izini bayan kariyar da take akwai don tashoshin manufa marasa aminci, maƙasudin CONNECT da aka iyakance da shiga gudanarwa. Ɗan yankin yana nuna sharadin abokin ciniki/mai sauraro; baya maye gurbin waɗannan kariyar.

An haɗa sharuɗɗa a layin http_access ɗaya da AND. Layukan izini biyu daban za su yarda da kowane sharadi da kansa, wanda zai canza manufofin sosai. Ƙimomi da yawa a cikin ACL ɗaya yawanci suna ba da zaɓuɓɓuka ga wannan gwajin guda ɗaya.

Zaɓi hanyar fita daban

Hakanan ana iya amfani da mai sauraro da ya dace ta tcp_outgoing_address don zaɓar adireshin tushe na gida. Wannan zaɓin hanya ne, ba izinin amfani da proxy ba. Dokar adireshin fita ba za ta iya sa buƙatar da aka ƙi ta wuce ta http_access ba.

Idan tsarin adireshi da yawa ya daina aiki bayan haɓakawa, raba shaidun: kuskuren bincike yana nuna tsarin rubutun saitin; ƙin shiga yana nuna daidaiton dokoki; buƙatar da aka yarda da ita tare da fitar da ba daidai ba tana nuna zaɓin fita ko NAT daga baya. Canza duka uku lokaci ɗaya yana sa ƙaramin kuskuren ACL ya fi wuya a samu.