| View previous topic :: View next topic |
| Author |
Message |
ConiKost
Developer
Joined: 11 Jan 2005
Posts: 1365
|
 Posted: Sat Oct 07, 2006 8:17 pm Post subject: Squid - Auth für IP Range deaktivieren? [Solved] |
 |
|
Hallo!
Vorweg: Mein jetziges Squid rennt ohne Probleme. Jeder User mit sich per HTTP Auth anmelden ...
Jedoch will ich nun diesen Auth für eien spezielle IP Range deaktivieren ...
Wie mache ich das?
| Code: | BlackBox squid # cat squid.conf
#####
#BlackBox Squid Proxy
#####
# Squid Port
http_port 3128
https_port 3129 cert=/etc/squid/ssl/geode-blackbox.de.crt key=/etc/squid/ssl/geode-blackbox.de.key
# Squid Cache
cache_mem 32 MB
cache_dir ufs /var/cache/squid 100 16 256
# Squid Logs
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
# Squid PID
pid_filename /var/run/squid.pid
# Squid User
cache_effective_user squid
cache_effective_group squid
# Sonstiges
ftp_user Squid@geode-blackbox.de
ftp_passive off
cache_mgr ConiKost@geode-blackbox.de
# ACL Auth setzen
acl all src 0.0.0.0/0.0.0.0
acl LAN src 192.0.0.0/24
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl FTP proto FTP
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
# User Auth
auth_param basic program /usr/lib/squid/ncsa_auth /etc/.htpasswd
auth_param basic children 5
auth_param basic realm BlackBox Squid Proxy
auth_param basic credentialsttl 24 hours
acl auth proxy_auth REQUIRED
acl conikost proxy_auth "/etc/squid/users"
# ACL Auth aktivieren
http_access allow auth
#always_direct allow FTP
http_access deny all |
Last edited by ConiKost on Sat Oct 07, 2006 10:14 pm; edited 3 times in total |
|
| Back to top |
|
 |
ConiKost
Developer
Joined: 11 Jan 2005
Posts: 1365
|
| Posted: Sat Oct 07, 2006 9:22 pm Post subject: |
|
|
http_access allow LAN
hat geholfen! |
|
| Back to top |
|
|
ConiKost
Developer
Joined: 11 Jan 2005
Posts: 1365
|
| Posted: Sat Oct 07, 2006 9:31 pm Post subject: |
|
|
Oke hat nicht geholfen *grml* 
EDIT
Habs nun doch raus!
Das http_access allow LAN MUSS vor http_access allow auth stehen! |
|
| Back to top |
|
|
|
Deutsches Forum (German)
