Re: [squid-users] ACL control over 2 private subnet and 1 public subnet

Yes. The IP addresses are then available at the point where you are
performing access controls.

Regards
Henrik Nordstr�m

On Monday 07 January 2002 05.24, Lim Seng Chor wrote:
> Is that possible if I do it in this way:
>
> configure a squid at my NAT gateway listening to the private IP
> interface and just to do the ACL control and passing the allowed http
> access to my squid box in DMZ?
>
> Please advise. Thanks.
>
> On 7 Jan 2002 at 4:45, Henrik Nordstrom wrote:
> > If you are using NAT to hide the users IP addresses before they reach
> > Squid, then Squid will have a very hard time basing access on such
> > information as it plain is not available.
> >
> > I think you should consider using authentication, requiring the users
> > to log in to the proxy service to reach the Internet. This way you can
> > base access controls on username, no matter what station they are
> > currently using.
> >
> > Regards
> > Henrik Nordstr�m
> > Squid Developer
> >
> > On Sunday 06 January 2002 16.42, Lim Seng Chor wrote:
> > > Hi,
> > >
> > > I have 2 subnets using private ip address and 1 subnet using public
> > > ip address (in fact it is DMZ). My squid box located at DMZ network
> > > but i find it very hard to generate the ACL to control my clients'
> > > http access coming from the private networks since the connections
> > > from the clients to the squid box are origin from the same IP which
> > > is the interior gateway IP. In this case, is there anyway I can
> > > restrict the http access based on client hostname or private ip
> > > address. Thank you for your help.
> >
> > --
> > MARA Systems AB, Giving you basic free Squid support
> > Customized solutions, packaged solutions and priority support
> > available on request

-- 
MARA Systems AB, Giving you basic free Squid support
Customized solutions, packaged solutions and priority support
available on request