I-ACL localport ye-Squid ihambisana nechweba lapho i-Squid yamukele khona uxhumano. Yihlanganise ne-ACL yendawo efanele ukuze umlaleli ngamunye avume uhlu lwakhe kuphela.

Ngokuhlelwa kwe-Squid 6 noma 7 okunezivimbelo zeklayenti nechweba eliphephile ezikhona:

http_port 3128
http_port 3129

acl approved_clients src 192.0.2.0/24
acl main_listener localport 3128
acl alternate_listener localport 3129
acl main_sites dstdomain "/etc/squid/main-sites.txt"
acl alternate_sites dstdomain "/etc/squid/alternate-sites.txt"

http_access allow approved_clients main_listener main_sites
http_access allow approved_clients alternate_listener alternate_sites
http_access deny all

Shintsha ibanga leklayenti elisemibhalweni ngamaklayenti agunyaziwe angempela futhi ulungise amafayela amabili ohluko lwezizinda. Beka imithetho ye-allow ebhangqwe ngemuva kwezihlolo ze-deny ezidingekayo zokufaka nangaphambi kwe-deny yayo yokugcina. Gcina izivimbelo zayo zamachweba angaphephile, i-CONNECT nokuphatha.

Amagama e-ACL emthethweni owodwa wokufinyelela ahlanganiswa nge-AND. Imithetho ye-allow ehlukene inikeza ezinye izindlela. Uma isimo somlaleli sisuswa emithethweni yendawo, noma yiluphi uhlu luzodlula kunoma yiliphi ichweba.

Hlola nokho imithetho yangaphambilini: i-allow ebanzi ehambisana kuqala ivimbela lezi zivimbelo zakamuva ukuthi zihlolwe. Ukuze uqinisekise umngcele, hlola izindawo ezivunyelwe nezinqatshiwe ngomlaleli ngamunye.

localport akuwona ichweba lewebhusayithi noma ichweba lomthombo wesikhashana leklayenti. Isimo sechweba lendawo sisebenzisa i-ACL port esikhundleni salokho.

Izihloko ezihlobene