RE: [squid-users] tcp_outgoing_address + Authentication

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Wed, 17 May 2006 10:39:07 +0200

tis 2006-05-16 klockan 23:46 +0100 skrev Shadi Almosri:
> tcp_outgoing_address 19.93.97.250 19_93_97_250
> tcp_outgoing_address 19.93.97.251 19_93_97_251
> tcp_outgoing_address 19.93.97.252 19_93_97_252
> tcp_outgoing_address 19.93.97.253 19_93_97_253
> tcp_outgoing_address 19.93.97.254 19_93_97_254
>
> This is the main issue that am not able to get working (the authentication
> per IP can be done later) it's the fact that squid seems to use the first ip
> for all outgoing connections and not the ip's specified.

Unless you have changed the 19_93_97_25X acls into something more
meaningful than "every authenticated user" the above won't work as all
users are matched by the first rule..

You need to make ACLs which identifies the individual user (or groups of
users) and use these ACLs in tcp_outgoing_address to select which IP is
assigned to the user.

The name of an acl has no impact on what the ACL matches, it's just a
name. The acl matches what comes after the name. "proxy_auth REQUIRED"
means authentication is required (proxy_auth) and that the acl matches
every authenticated user (REQUIRED).

Regards
Henrik

Received on Wed May 17 2006 - 02:39:59 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Jun 01 2006 - 12:00:02 MDT