Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How to add a user with the domain name to Squid's default configuration file? By default Squid is configured to only accept requests from localhost. I'd like to add one more domain to the access list. The domain is in the external network (Internet).

share|improve this question
up vote 1 down vote accepted


acl example_com srcdomain

to your squid.conf. I suggest you group it with your other acls, but it doesn't matter where you put it. You then need to add

http_access allow

in the http_access section. The order of http_access does matter, as it checks the access against them from top to bottom. You need to put it before the line that says:

http_access deny all

It's worth pointing out that you're allowing access based on reverse DNS lookups. Anyone can change their reverse DNS to point at this domain. It's security by obscurity. No one is likely to bother, but they could.

share|improve this answer
David: Thanks, would this be enough to process HTTPS requests? – Alex Aug 9 '09 at 8:34
That would depend massively on your existing http_access rules. It would appear that the standard Debian/Ubuntu config allows equal access to https and http. – David Pashley Aug 9 '09 at 10:53

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.