RE: [squid-users] Problems with ACL max_user_ip on squid2.5 stable3

From: Ola <procnetuk@dont-contact.us>
Date: Thu, 10 Jul 2003 14:42:13 +0100 (BST)

here is my squid configuration -

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
 cache_dir ufs /usr/cache 100 16 256
 debug_options ALL,1 33,2
auth_param ntlm program /etc/squid3/libexec/ntlm_auth
hq/dc01
auth_param ntlm children 3
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 1 minutes
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
 authenticate_ttl 3 minutes
 authenticate_ip_ttl 180 seconds
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl me src 192.168.0.0/24
http_access deny !me
acl authenticated proxy_auth REQUIRED
http_access deny !authenticated
acl onlyonce max_user_ip 1
http_access deny onlyonce
http_access allow authenticated
http_access deny all
http_reply_access allow all
icp_access allow all
visible_hostname me.com
coredump_dir /etc/squid3/var/cache

thanks

 --- Adam Aube <aaube@firstindependent.net> wrote: > >
i am using authenticate_ip_ttl 20 minutes
> > and max_user_ip -s 1 but the problem persists.
> > what could be wrong?
>
> The items you include from your squid.conf look good
>
> (though a little over-complex). Could you post your
> entire squid.conf (minus comments, of course)?
>
> Adam
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system
> (http://www.grisoft.com).
> Version: 6.0.237 / Virus Database: 115 - Release
> Date: 3/7/2001
>

________________________________________________________________________
Want to chat instantly with your online friends? Get the FREE Yahoo!
Messenger http://uk.messenger.yahoo.com/
Received on Thu Jul 10 2003 - 07:42:17 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:17:55 MST