[squid-users] authenticate_ip_ttl_is_strict

From: haji din <ahbh99@dont-contact.us>
Date: Wed, 2 Oct 2002 21:06:58 -0700 (PDT)

hi list,

i want to discourage users from sharing their
username/password for internet access by restricting
simultaneous connections from different ip adresses
with the same username/password; but failed. i still
be able to connect thru squid from multiple machines
using a same username/password combination. here is
part of my squid.conf:

redirect_rewrites_host_header off
cache_replacement_policy GDSF
proxy_auth_realm Squid
authenticate_program
/opt/squid/libexec/squid/msnt_auth
authenticate_children 10
authenticate_ip_ttl_is_strict on
authenticate_ttl 600 seconds
authenticate_ip_ttl 600 seconds
redirect_program /usr/local/bin/squidGuard -c
/usr/local/bin/squidGuard.conf
redirect_children 4
acl localnet src 192.168.0.0/255.255.255.0
acl localhost src 127.0.0.1/255.255.255.255
acl Safe_ports port 80 443 210 119 70 20 21 1025-65535
acl CONNECT method CONNECT
acl all src 0.0.0.0/0.0.0.0
acl localserver dst 192.168.0.0/255.255.255.0
acl snmppublic snmp_community public
acl password proxy_auth REQUIRED
http_access allow localserver
http_access allow password
http_access allow localnet
http_access allow localhost
http_access deny !Safe_ports
http_access deny CONNECT
http_access deny all

any asistance appreciated.

__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com
Received on Wed Oct 02 2002 - 22:06:59 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:10:35 MST