想请问一下squid的验证顺序

Question

是先允许allow的，最后deny all ,是禁止所有非allow的吧
cl SSL_ports port 443 563
acl Safe_ports port 80                # http
acl Safe_ports port 21                # ftp
acl Safe_ports port 443 563        # https, snews
acl Safe_ports port 70                # gopher
acl Safe_ports port 210                # wais
acl Safe_ports port 1025-65535        # unregistered ports
acl Safe_ports port 280                # http-mgmt
acl Safe_ports port 488                # gss-http
acl Safe_ports port 591                # filemaker
acl Safe_ports port 777                # multiling http
acl CONNECT method CONNECT

# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports

# Deny CONNECT to other than SSL ports
http_access deny CONNECT SSL_ports

http_access allow somebody
...................................
..
.
http_access deny all

既然http_access deny !Safe_ports，最后又deny all，是不是所有的端口都被禁止了？

Answer 1

你中间肯定有allow的

Answer 2

http_access deny all是禁止许可之外的所有主机访问代理服务器

http_access deny !Safe_ports是禁止所有主机（包括具有许可访问代理服务器的主机）访问代理服务器Safe_ports外所有端口

Answer 3

??