@@ -923,10 +923,12 @@ acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
923
923
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
924
924
acl localnet src fc00::/7 # RFC 4193 local private network range
925
925
acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines
926
- acl localnet src 2001:a:3::/64
926
+ acl localnet src 2001:b:3::/64
927
+
927
928
928
929
acl SSL_ports port 443
929
- acl Safe_ports port 8080
930
+ acl Safe_ports port 80 # http
931
+ acl Safe_ports port 8080 # http
930
932
acl Safe_ports port 21 # ftp
931
933
acl Safe_ports port 443 # https
932
934
acl Safe_ports port 70 # gopher
@@ -1053,15 +1055,14 @@ acl CONNECT method CONNECT
1053
1055
# Recommended minimum Access Permission configuration:
1054
1056
#
1055
1057
# Deny requests to certain unsafe ports
1056
- # http_access deny !Safe_ports
1058
+ http_access deny !Safe_ports
1057
1059
1058
1060
# Deny CONNECT to other than secure SSL ports
1059
1061
#http_access deny CONNECT !SSL_ports
1060
1062
1061
1063
# Only allow cachemgr access from localhost
1062
- #http_access allow localhost manager
1063
- http_access allow manager
1064
- #http_access deny manager
1064
+ http_access allow localhost manager
1065
+ http_access deny manager
1065
1066
1066
1067
# We strongly recommend the following be uncommented to protect innocent
1067
1068
# web applications running on the proxy server who think the only
@@ -1077,9 +1078,10 @@ http_access deny to_localhost
1077
1078
# from where browsing should be allowed
1078
1079
http_access allow localnet
1079
1080
http_access allow localhost
1081
+ http_access allow all
1080
1082
1081
1083
# And finally deny all other access to this proxy
1082
- http_access deny all
1084
+ # http_access deny all
1083
1085
1084
1086
# TAG: adapted_http_access
1085
1087
# Allowing or Denying access based on defined access lists
0 commit comments