#
# CONFIG FILE FOR SQUIDGUARD
#

dbhome /var/squidGuard/blacklists
logdir /var/log/squidGuard

#
# TIME RULES:
# abbrev for weekdays: 
# s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat

time workhours {
	weekly mtwhf 08:00 - 16:30
	date *-*-01  08:00 - 16:30
}

#
# REWRITE RULES:
#

rew dmz {
	s@://admin/@://admin.foo.bar.de/@i
	s@://foo.bar.de/@://www.foo.bar.de/@i
}

#
# SOURCE ADDRESSES:
#

src admin {
	ip		1.2.3.4 1.2.3.5
	user		root foo bar
	within 		workhours
}

src foo-clients {
	ip		172.16.2.32-172.16.2.100 172.16.2.100 172.16.2.200
}

src bar-clients {
	ip		172.16.4.0/26
}

#
# DESTINATION CLASSES:
#

dest good {
}

dest local {
}

dest adult {
	domainlist	dest/adult/domains
	urllist		dest/adult/urls
	expressionlist	dest/adult/expressions
	redirect 	http://admin.foo.bar.de/cgi/blocked?clientaddr=%a+clientname=%n+clientuser=%i+clientgroup=%s+targetgroup=%t+url=%u
}


acl {
	admin {
		pass	 any
	}

	foo-clients within workhours {
		pass	 good !in-addr !adult any
	} else {
		pass any
	}

	bar-clients {
		pass	local none
	}

	default {
		pass	 local none
		rewrite	 dmz
		redirect http://admin.foo.bar.de/cgi/blocked?clientaddr=%a+clientname=%n+clientuser=%i+clientgroup=%s+targetgroup=%t+url=%u
	}
}