# Ausschnitt fuer /etc/squidguard/squidGuard.conf
# dbhome muss zu squidguard-rebuild.sh (DB=/var/lib/squidguard/db) passen.

dbhome /var/lib/squidguard/db
logdir /var/log/squidguard

# --- IP-Zuordnung der Rechner je Arbeitsgruppe ---------------------------
src ag01 { ip 10.0.1.11  10.0.1.12 }   # die 8 Rechner der AG01 ...
src ag02 { ip 10.0.2.11  10.0.2.12 }
# ... ag03 .. ag08 analog

# --- Ziel-Listen je Gruppe (self-managed via GitLab) ---------------------
dest ag01 {
    domainlist AG01/AG01domain
    urllist    AG01/AG01url
}
dest ag02 {
    domainlist AG02/AG02domain
    urllist    AG02/AG02url
}
# ... dest ag03 .. ag08 analog

acl {
    ag01 { pass ag01 none }            # AG01 darf nur ihre eigenen Ziele
    ag02 { pass ag02 none }
    # ... ag03 .. ag08 analog
    default {
        pass none
        redirect http://intranet.firma.local/blocked?url=%u
    }
}