[squid-users] No password to internal addresses

From: yagh mur <yaghmr_at_gmail.com>
Date: Mon, 10 Nov 2008 09:50:02 +0100

Hi all,
I've to configure Squid2 in order to ask for a password if a user go
to an external address
and no password have to be asked if the destination address is internal

I've this rules:

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8

http_access allow manager localhost
http_access deny manager

acl mynetwork src a.b.c.d/x
acl to_mynetwork dst a.b.c.d/x

external_acl_type NT_global_group %LOGIN c:/squid/libexec/win32_check_group.exe
acl users1 external NT_global_group Users
acl password proxy_auth REQUIRED

http_access allow to_mynetwork users1
http_access allow password users1
http_access allow mynetwork
http_access deny all

but in this way squid require a password also if the dst address is in
my network,
what's the correct way to perform this task?
Received on Mon Nov 10 2008 - 08:50:19 MST

This archive was generated by hypermail 2.2.0 : Mon Nov 10 2008 - 12:00:03 MST