Re: [squid-users] Authentification on each multiple outgoing ip

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Sat, 07 Nov 2009 15:52:45 +1300

п╓я─п╟п╫я│я┐п╟ п°п╟я─я┌iп╫п╣я│ wrote:
> Hi guys.
> I have such issue. My head has already swolen from this issue ))) So...
>
> I have server with several outgoing IPs. My task: to each outgoing IP
> on proxy bind login-password
>
> Doesnt matter ip source of user. User use proxy if he knows
> login-password for separate ip on proxy.
>
> i attach my squid.cong file.
>
>
> so far, in squid.cong i wrote 2 proxy IPs.
> i tried to bind different login-passw to them.
> but.
> doesnt matter via what proxy ip i want to connect my browser.
> i setup browser even on IPs that not yet mentioned in squid.conf (in
> squid.conf there only 6.1.9.1 and 2.5.2.4)
> all the proxy IPs while trying to connect through them demand
> login-password. And for all of them the only right login is mechelen
> (see in squid.conf)
>
> can anybody help with this task?
> thx a lot!
>

Lets see.....

acl one myip 6.1.9.1
acl duisburg proxy_auth -i mechelen
http_access allow duisburg one
tcp_outgoing_address 6.1.9.1 one

... "mechlen" is allowed unlimited access when using 6.1.9.1:3128 as the
proxy. Everybody connecting to 6.1.9.1 will be sent out with IP 6.1.9.1.

acl two myip 2.5.2.4
acl essen proxy_auth -i zwolle
http_access allow essen two
tcp_outgoing_address 2.5.2.4 two

... "zwolle" is allowed unlimited access when using 2.5.2.4:3128 as the
proxy. Everybody connecting to 2.5.2.4 will be sent out with IP 2.5.2.4.

acl me src 2.9.3.6
http_access allow me

... the person using machine 2.9.3.6 is allowed unlimited access.
Operating system selected IP is used.

I think you are testing from 2.9.3.6 yes?

... which means login will be requested. However no matter what gets
entered. The operating system picks the default IP (I suspect that is
6.1.9.1 and causing you confusion).

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE20
   Current Beta Squid 3.1.0.14
Received on Sat Nov 07 2009 - 02:53:10 MST

This archive was generated by hypermail 2.2.0 : Sat Nov 07 2009 - 12:00:02 MST