Time restriction in SQUID

Hi
i am trying to restrict a perticular user PC from using the Internet
facility on Time restriction basis. I add following entries
in squid.conf file.
**********************
acl restnet src 192.168.27.151
acl WORKING time MTWHF 11:00-11:30
http_access allow restnet
*******************************

I found that user sitting at 192.168.27.151 is able to browse the
Internet even after the specified hours
(11:00-11:30). Means these settings are not working.
Can anyone tell what else is reqd. to restrict the particular PC for
particular time period? or can someone suggests the
change in this code?
Thanks in Advance

["Followup-To:" header set to comp.os.linux.networking.]
On 2005-01-19, Jayant patil <(E-Mail Removed)> wrote:

> i am trying to restrict a perticular user PC from using the Internet
> facility on Time restriction basis. I add following entries
> in squid.conf file.
> **********************
> acl restnet src 192.168.27.151
> acl WORKING time MTWHF 11:00-11:30
> http_access allow restnet
> *******************************
>
> I found that user sitting at 192.168.27.151 is able to browse the
> Internet even after the specified hours
> (11:00-11:30). Means these settings are not working.
> Can anyone tell what else is reqd. to restrict the particular PC for
> particular time period? or can someone suggests the
> change in this code?

Have you tried "http_access deny all" directive before "http_access allow
restnet"?

--

John ((E-Mail Removed))

(E-Mail Removed) (Jayant patil) writes:

> i am trying to restrict a perticular user PC from using the Internet
> facility on Time restriction basis. I add following entries
> in squid.conf file.
> **********************
> acl restnet src 192.168.27.151
> acl WORKING time MTWHF 11:00-11:30
> http_access allow restnet
> *******************************
>
> I found that user sitting at 192.168.27.151 is able to browse the
> Internet even after the specified hours
> (11:00-11:30). Means these settings are not working.

You've defined the "WORKING" acl but the configuration you show
doesn't apply it. Also, if you have any http_access lines following
what you've shown then you might need to add an explicit deny for
"restnet" so it doesn't match any subsequent "allow" rules. Example:

http_access allow WORKING restnet
http_access deny restnet # not necessary if subsequent rules would deny

Make sure no preceding http_access lines are allowing access to
"restnet" before these are checked.

--
Michael Fuhr
http://www.fuhr.org/~mfuhr/