This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block IPs from internet...

I want to block certain machines/ips from going through the router.

I am running the http proxy (squid). I looked at the acl's in squid.conf-default and it told me to manage it though the packetfilter. I tried this:
From - Service - Server - Action
{ Labelers } Any Any Drop 

They still get through, but if I turn off the cache then it works??

How can I get my rules above the proxy rules??

HELP!?!?!?

Thanks!!


This thread was automatically locked due to age.
Parents
  • remove them from allowed users in the http proxy area...the http proxy when active overrides the packet filter.  Then block the users in the packet filter as well..they will be locked out.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • remove them from allowed users in the http proxy area...the http proxy when active overrides the packet filter.  Then block the users in the packet filter as well..they will be locked out.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children