Re: [squid-users] Squid, read denied ip's from a text file , authentication + rules

From: <vangelr@dont-contact.us>
Date: Wed, 27 Apr 2005 22:46:06 +0800 (WST)

Robert Becskei said:
> Hello everyone,
>
> thank you for the fast help :) , it did work out , and now it works, but
> I
> wonder is it possible (don't know how) to make
> squid read the ip's of my denied clients from a file (text file) , sorta
> like it does when it reads the banned extensions from a file... this
> possible?
> currently my acl shops src xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy .... is very
> long
> got 15 ip's... if reading from a file is not possible how can you do that
> one acl takes up many lines like
> acl shops src xxx.xxx.xxx.xxx
> yyy.yyy.yyy.yyy
> zzz.zzz.zzz.zzz
> .
> .
> .

acl shops src "/etc/squid/shops"

/etc/squid/shops --

xxx.xxx.xxx.xxx
yyy.yyy.yyy.yyy
zzz.zzz.zzz.zzz

etc

>
>
> I use authentication (basic),... I would like to know, is it possible
> (and
> is there a example) , to do the following :
>
> user logs in with username internet password internet, and is able to
> browse , but no porn, some extensions are banned
>
> user logs in with username master password topsecret, and is able to
> browse
> , no restricitons...
>

This is possible, quite easily, but I cannot think of the http_access
statements to use off the top of my head at this time

> Sincerely
> Robert B
>
>
> ----- Original Message -----
> From: "Chris Robertson" <crobertson@gci.com>
> To: "'Robert Becskei'" <brobiwbe@stcable.co.yu>;
> <squid-users@squid-cache.org>
> Sent: Wednesday, April 20, 2005 21:34
> Subject: RE: [squid-users] Squid, redirect user by ip from 06 to 18:00 to
> you are not allowed to surf page
>
>
>>> -----Original Message-----
>>> From: Robert Becskei [mailto:brobiwbe@stcable.co.yu]
>>> Sent: Wednesday, April 20, 2005 9:19 AM
>>> To:
>>> Subject: [squid-users] Squid, redirect user by ip from 06 to 18:00 to
>>> you are not allowed to surf page
>>>
>>>
>>> Hello everyone,
>>>
>>> I've been running squid for a while, and did a few redirection via
>>> squidguard, and also some really simple authentication etc...
>>>
>>> but this one I don't know how to accomplish :
>>>
>>> I would like to redirect a certain group of ip addresses
>>> (192.168.1.40-192.168.1.80) from 6:00 till 18:00 to a banned.html
>>> webpage, so they will only be able to surf the internet after workhours
>>> 18:00 till 06:00 .
>>>
>>> is this possible? a hint if I may beg ? :)
>>>
>>> Sincerely
>>> Robert Becskei
>>
>>
>> acl workers src 192.168.1.40-192.168.1.80/32
>> acl workTime time M-F 06:00-18:00
>> http_access deny workers workTime
>> deny_info http://my.web.server/banned.html workers workTime
>>
>> Placing these acls in the correct position in the squid.conf is an
>> exercise
>> left to the reader. An alternative is to save the banned.html page to
>> Squid's error directory and change the deny_info line appropriately.
>> These
>> acls have not been tested in a production environment, and are provided
>> without warranty expressed or implied, yadda yadda yadda.
>>
>> Chris
>>
>
>
Received on Wed Apr 27 2005 - 08:46:11 MDT

This archive was generated by hypermail pre-2.1.9 : Sun May 01 2005 - 12:00:04 MDT