Re: [squid-users] proxy external ip address acl

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 29 Apr 2011 01:47:57 +1200

On 28/04/11 23:37, J Webster wrote:
> I currently have a squid proxy using ncsa auth.
> I would also like to add an ip address auth for those users that cannot
> enter usernames and passwords (some iphones, DVD players etc.|)
> Can I just add an acl like this:
>
> acl external_IP 200.123.45.23

With the right syntax though...
   acl external_IP src 200.123.45.23

> http_access allow external_IP
>
> Will this mess with the ncsa auth?

It will.

  You have already said they "cannot enter usernames and passwords". So
the interference being in the form of not asking for username/password
seems to be what you are wanting.

I would extend that a bit and maybe check for User-Agent ("browser" ACL)
as well as IP. Just in case they change IP.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.12
   Beta testers wanted for 3.2.0.7 and 3.1.12.1
Received on Thu Apr 28 2011 - 13:48:01 MDT

This archive was generated by hypermail 2.2.0 : Thu Apr 28 2011 - 12:00:03 MDT