Izvinite srazu za ptichki ...
Problema: nado klientam "CENTR" orkrit dostup dlia .zip .exe tolko! iz
domeinov symantec`a. Klientam "ADMINS" dostup dlia .zip .exe polnij.
Imeem:
-------------------------
acl CENTR src 192.168.111.49-192.168.111.80/255.255.255.255
acl ADMINS src 192.168.111.93/255.255.255.255
acl symantec dstdomain symantec.com symantecliveupdate.com akamai.net
acl strogo urlpath_regex -i \.qt$ \.com$ \.vbs$ \.bat$ \.pps$ \.rar$ \.ace$ \.arj$
acl ZIP urlpath_regex \.[zZ][iI][pP]$ \.[eE][xX][eE]$
acl zapresch_domeni dstdomain "/etc/squid/policy/zapresch_domeni"
acl dl_zapresch_domeni dstdomain "/etc/squid/policy/dl_zapresch_domeni"
acl zapresch_slova url_regex "/etc/squid/policy/zapresch_slova"
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow ZIP symantec CENTR??? javno nerabotaet
http_access deny ZIP !ADMINS??? otrubaet vsio krome ADMINS..
http_access deny strogo !ADMINS
http_access deny zapresch_slova !ADMINS
http_access deny zapresch_domeni !ADMINS
http_access deny dl_zapresch_domeni rabochee_vremia !ADMINS
http_access allow ADMINS
http_access allow CENTR
http_access deny all
--------------------------------
tobesh ja reshaju problemu, chtobi NAV sam obdeitilsia u klientov setki bez privelegij cherez proxy i ne strekozlit` po vsem kompam i samomu cherez samba ili td update NAV`u tolkat -:-/
spasibo za liubie idei po dannoj teme.