From 964867cf3f075a9b20ad5ca06f8c6537f6b1d37d Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Fri, 28 Jan 2005 23:33:01 +0000
Subject: [PATCH] Add ACL info to Squid documenation

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1931 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall-docs2/Shorewall_Squid_Usage.xml | 28 ++++++++++++++++++++---
 1 file changed, 25 insertions(+), 3 deletions(-)

diff --git a/Shorewall-docs2/Shorewall_Squid_Usage.xml b/Shorewall-docs2/Shorewall_Squid_Usage.xml
index dc3bf47e2..945eee798 100644
--- a/Shorewall-docs2/Shorewall_Squid_Usage.xml
+++ b/Shorewall-docs2/Shorewall_Squid_Usage.xml
@@ -62,9 +62,31 @@
         </listitem>
 
         <listitem>
-          <para>Other Squid configuration is required (particularly, you need
-          to modify the original squid security settings) -- see <ulink
-          url="http://www.squid-cache.org/">http://www.squid-cache.org/</ulink>.</para>
+          <para>Other Squid configuration are usually required required. These
+          changes typically consist of:</para>
+
+          <orderedlist>
+            <listitem>
+              <para>Adding an ACL that represents the clients on your local
+              network.</para>
+
+              <para>Example:</para>
+
+              <programlisting>ACL my_networks src 192.168.1.0/24 192.168.2.0/24</programlisting>
+            </listitem>
+
+            <listitem>
+              <para>Allowing HTTP access to that ACL.</para>
+
+              <para>Example:</para>
+
+              <programlisting>http_access allow my_networks</programlisting>
+            </listitem>
+          </orderedlist>
+
+          <para>See your distribution's Squid documenation and <ulink
+          url="http://www.squid-cache.org/">http://www.squid-cache.org/</ulink>
+          for details.</para>
         </listitem>
 
         <listitem>