[squid-users] ncsa_auth - binding to specific ports

From: rem <rem@dont-contact.us>
Date: Fri, 19 Oct 2001 03:58:12 +0300

hello squid-users!

i have a linux 2.4 box with squid installed and having ncsa_auth as
authentication methond. squid executable spawns a specified number of
ncsa_auth processes and binds them to some high number ports, BUT
is it possible to specify these ports to be bound to?

the problem is that i have several shell users (SSH shell) on the
system and i don't want them to create processes that bind themselves
to specific ports that can be accessed remotely or even locally
(because they can use ssh forwarding and use them remotely). for that
reason i have firewalled out even unwanted localhost->localhost TCP
transfers and squid authentication as a result does not work, unless i
specifically allow these ports in firewall (which is dirty, as the
port numbers change on squid/system restarts, etc)

is there a way how to solve this problem without changing
authetication shceme? if not, which authetication would you recommend?
  
kind regards,
rem
Received on Thu Oct 18 2001 - 23:32:00 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:02:52 MST