squid

[Николай Сеньков <senkov@irc.gazprom.ru>]

Здравствуйте
Нужно сделать доступ для групп internet и allwhatyouwant
и запрет для всех остальных.
Не подскажите где ошибка

#	WELCOME TO SQUID 2

http_port 4480

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

# ACCESS CONTROLS
# --------------------------------------------------------------------------
---
#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl Safe_ports port 901
acl purge method PURGE
acl CONNECT method CONNECT

acl internet src senkov.internal.irc.gazprom.ru.
................................................

acl local-servers dstdomain internal.irc.gazprom.ru

acl media-files urlpath_regex -i \.mp3$
acl media-files urlpath_regex -i \.mpeg$
acl media-files urlpath_regex -i \.mpg$
acl media-files urlpath_regex -i \.avi$
acl media-files urlpath_regex -i \.wmf$

acl allwhatyouwant src senkov.internal.irc.gazprom.ru.
.....................................................

#http_access deny all
#
#Recommended minimum configuration:
#

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access allow internet
http_access allow allwhatyouwant
http_access deny media-files

# And finally deny all other access to this proxy

http_access deny all