Re: [squid-users] limit one login for 1 ip address (ncsa base auth)

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 11 Feb 2009 15:21:01 +1300

Andry Yudianto wrote:
> Dear all,
>
> I want to use NCSA base auth, and I want to limit one login for one ip
> address but it seems my configuration didn't work; here the config. Thank
> you

http://www.squid-cache.org/Doc/config/authenticate_ip_ttl/
<snip>
>
> http_access allow manager localhost
> http_access deny ncsa_users maxlogin
> http_access allow ncsa_users !blokaja

> http_access deny manager
> http_access deny !Safe_ports
> http_access deny CONNECT !SSL_ports

Putting these safety nets below the allow's prevents squid using them to
protect you against malicious or infected users.

> http_access deny all
>
> #http_reply_access allow all
> icp_access deny all
> cache_effective_user squid

> cache_effective_group squid

whack!
Please don't use this.

> visible_hostname squid.i2dot.net
> cache_mem 512 MB
> cache_mgr andre_at_i2dot.net
> delay_pools 1
> delay_class 1 2
> delay_parameters 1 64000000/64000 16000/32000
> delay_access 1 allow all
>

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
   Current Beta Squid 3.1.0.5
Received on Wed Feb 11 2009 - 02:20:56 MST

This archive was generated by hypermail 2.2.0 : Wed Feb 11 2009 - 12:00:01 MST