Re: [squid-users] Mac address based restriction

From: Visolve.com <squid@dont-contact.us>
Date: Sun, 19 May 2002 14:50:13 +0530

Hello santharam,

You can use arp acl.

To use ARP (MAC) access controls, you first need to compile in the optional
code. Do this with the --enable-arp-acl configure option:

% ./configure --enable-arp-acl ...
% make clean
% make

Note 1: If src/acl.c doesn't compile, then ARP ACLs are probably not
supported on your system.

If everything compiles, then you can add some ARP ACL lines to your
squid.conf

Usage
acl aclname arp ARP-ADDRESS
Example
acl ACLARP arp 11:12:13:14:15:16
ACLARP refers MACADDRESS of the ethernet 11:12:13:14:15:16

Note 2: Squid can only determine the MAC address for clients that are on the
*same* subnet(i.e. ARP acl checks only work for the local ethernet lan. If
the user is behind a router then the MAC address is that of the router). If
the client is on a different subnet, then Squid cannot find out its MAC
address.

If you've still problem, try to send squid.conf and specify the version of
squid that you are using.

Thanks and Regards,
-Sathyan
http://www.visolve.com
Get Unlimited Squid Support .Click http://squid.visolve.com/Vi_support.pdf
for details.

> Hi ,
> I want to allow htttp access only for certain computers.Is there
> any way to restrict the http access using hardware address.
>
> Thanks
> santha
> _________________________________________________________
> Click below to visit monsterindia.com and review jobs in India or
> Abroad
> http://monsterindia.rediff.com/jobs
Received on Sun May 19 2002 - 03:12:34 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:09 MST