dear Ubuntu forum

saya lagi kesulitan mau blok akses dengan ketentuan yang bertingkat, sebagai contoh :
-VVIP boleh akses kemana saja
-VIP hanya boleh akses di web tertentu
-Staff lebih terbatas lagi

tapi setelah saya buat ketentuannya seperti dibawah ini, kok yang VIP dan Staff tetep bisa browsing kemana aja ya ??

mestinya vip bisa akses gmail dan yahoo saja staff cuma bisa akses gmail saja

pengaturannya dibawah ini :

acl apache rep_header Server ^Apache
acl Sosial-Network url_regex -i facebook twitter friendster meebo indowebster.com youtube.com
acl Waktu-kerja time MTWHF 05:30-23:30
acl Web-akses1 dstdom_regex -i google gmail yahoo id.yahoo.com
acl web-akses2 dstdom_regex -i gmail
#acl Waktu-kerja time MTWHF 11:31-23:50

acl VVIP src 192.168.70.1-192.168.70.4 192.168.70.6-192.168.70.10 192.168.70.16 192.168.70.249
acl All-Website dst 0.0.0.0/0.0.0.0
acl VIP src 192.168.70.5 192.168.70.12-192.168.70.13 192.168.70.17 192.168.70.22 192.168.70.27-192.168.70.28 192.168.70.40-192.168.70.41
acl Staff src 192.168.70.14-192.168.70.15 192.168.70.20 192.168.70.23-192.168.70.26 192.168.70.30
acl To-Lokal-Server dst 202.127.107.226-202.127.107.230 202.51.103.114-202.51.103.118

acl Webmin port 10000
acl File-Mutimedia url_regex -i \.3gp$ \.ac3$ \.aif$ \.aifc$ \.aiff$ \.asf$ \.au$ \.avi$ \.dat$ \.div$ \.divx$ \.dts$ \.dvr-ms$ \.flv$ \.m1v$ \.m2v$ \.mid$ \.midi$ \.mkv$ \.mp2$ \.mp2v$ \.mp3$ \.mp4$ \.mpa$ \.mpe$ \.mpeg$ \.mpg$ \.mpv2$ \.qt$ \.ram$ \.raw$ \.rm$ \.rmi$ \.rmvb$ \.snd$ \.vob$ \.vqf$ \.vro$ \.wav$ \.wma$ \.wmv$ \.rar$
acl File-Pics url_regex -i \.srf$ \.tga$ \.tif$ \.tiff$ \.tif$ \.ttf$ \.hdf$ \.wbmp$ \.wmf$ \.x3f$ \.xbm$ \.xpm$ \.cr2$ \.crw$ \.dcr$ \.djvu$ \.emf$ \.eps$ \.fpx$ \.icl$ \.icn$ \.iff$ \.jp2$ \.jpc$ \.mrw$ \.nef$ \.orf$ \.pbm$ \.pcd$ \.pcx$ \.pef$ \.pgm$ \.pic$ \.pict$ \.plp$ \.ppm$ \.psd$ \.psp$ \.raf$ \.ras$ \.raw$ \.rs$ \.sgi$
acl File-Execute url_regex -i \.exe$ \.msi$ \.rpm$ \.bin$
acl Web-Proxy dstdom_regex -i \.srf$ \.tga$ \.tif$ \.tiff$ \.tif$ \.ttf$ \.hdf$ \.wbmp$ \.wmf$ \.x3f$ \.xbm$ \.xpm$ \.cr2$ \.crw$ \.dcr$ \.djvu$ \.emf$ \.eps$ \.fpx$ \.icl$ \.icn$ \.iff$ \.jp2$ \.jpc$ \.mrw$ \.nef$ \.orf$ \.pbm$ \.pcd$ \.pcx$ \.pef$ \.pgm$ \.pic$ \.pict$ \.plp$ \.ppm$ \.psd$ \.psp$ \.raf$ \.ras$ \.raw$ \.rs$ \.sgi$
acl Web-Sering dstdom_regex -i my.mail.ru
acl Web-Refresh dstdom_regex -i facebook.com detik.com livescores.com
acl Streaming url_regex youtube
acl Other dstdom_regex -i livescore
acl Porn-url url_regex -i [hard|soft]core adult ^anal amateur bigdicks bigtits bisexual bizarre blonde blowjob bondage cumshot fetish fuck gangbang ^gay$ handjob hentai lesbian mature milf nude oral pissing porn pussy sex shemale teens wild xxx sleazydream.com youtube.com redtube

cache deny QUERY Web-Refresh

http_access allow VVIP
http_access deny Porn-url
http_access deny !Safe_ports
http_access deny File-Execute
http_access deny Web-Proxy
http_access deny Other
http_access allow !Waktu-kerja
http_access allow VIP
http_access allow Web-akses1
http_access allow Staff
http_access allow Web-akses2
#http_access deny !Waktu-kerja
http_access deny Streaming
http_access allow Webmin
http_access allow To-Lokal-Server
http_access deny All-Website
http_access deny all
broken_vary_encoding allow apache


semoga ada yang mau membantu

tks sebelumnya

squid itu membaca dari atas ke bawah...coba liat squid.conf