Umthetho owodwa we-allow ku-Squid usho AND; emibili ingasho OR

Funda lo mthetho ngokuzwakalayo: vumela inethiwekhi yasehhovisi ukuthi isebenzise i-proxy endaweni evunyelwe. Uma lezo zimo zihamba ndawonye, zigcine ndawonye emthethweni.

http_access allow office_clients approved_destination

Womabili ama-ACL kufanele afane ukuze lowo mugqa uvumele isicelo. Ukuwuhlukanisa kushintsha inqubomgomo:

http_access allow office_clients
http_access allow approved_destination

Manje amaklayenti asehhovisi angavunyelwa ngaphandle komkhawulo wendawo, nezicelo eziya kuleyo ndawo ngaphandle komkhawulo wasehhovisi, ngaphandle uma umthetho wangaphambili ubahlanile. Imigqa emibili ayisona isipelingi esifundeka kakhudlwana somugqa owodwa.

Ukuhleleka kuyingxenye yenqubomgomo

I-Squid ihlola imithetho yokufinyelela ngokulandelana. Isinqumo sokuqala esifanayo silawula isicelo. I-allow all yangaphambili yenza umkhawulo oqaphelekayo wakamuva ungasebenzi; ukwenqaba okufanayo kwangaphambili kuvimbela ukufinyelela emvume yamuva.

Idokhumenti ye-http_access ichaza lokhu kulandelana. Gcina ukwenqaba kokugcina okwenziwe ngamabomu esikhundleni sokuthembela ekutheni umfundi ukhumbula ukuziphatha okuzenzakalelayo okusobala.

Izincazelo eziningi ze-ACL zinobudlelwano obuhlukile be-OR: i-ACL yomthombo enamagama ingabala izikhathi ezimbalwa ezivunyelwe. Lokho akwenzi ubunikazi bomthombo nendawo bube uhlobo olufanayo lwe-ACL. Zichaze ngokwahlukana, bese uhlanganisa amagama esinqumweni sokufinyelela.

Ngokuphuma kwangasese, lokhu kuthinta ukuthi ubani angasebenzisa i-IP yakho yangaphandle. Cabanga izimo ezine: iklayenti elivunyelwe eliya endaweni evunyelwe, iklayenti elivunyelwe eliya kwenye indawo, elinye iklayenti eliya endaweni evunyelwe, nelinye iklayenti eliya kwenye indawo. Uma imithetho ivumela izimo eziningi kunalokho okuhloswe inqubomgomo, lungisa umqondo ngaphambi kokwandisa isilaleli. Ukuhlelwa okulungile ngokohlelo lokukhuluma kusengaveza izimvume ezingalungile.