Re: Squid-authentification: auth+ip

Roman Shterenzon wrote:
>
> Hello,
> I'm looking for some advice...
> I've read through the FAQ and release notes, but I haven't found way to
> make an acl based both on user/pass and on ip/mask.
> What I realy mean - suppose we have pool of 20 users, which we want to
> limit to only one segment - the teaching class, so they won't be able to
> browse from anywhere else.

This is sort of possible..

1. Apply proxy_auth patch from http://hem.passagen.se/hno/squid/
2. Squid.conf rules:

acl other_users proxy_auth roman dave ...
acl all_users proxy_auth REQUIRED
acl lab_net src 10.0.0.0/24
acl other_net src x.y.z.0/q

http_access allow lab_net all_users
http_access allow other_net other_users

This can be improved a great deal.

---
Henrik Nordstrom
Spare time Suqid hacker