Restriction using MAC address (squid) SuSE

win32sux · 08-14-2006, 09:47 PM

Quote:

Originally Posted by AQG

win32sux thanks what you told me was correct my problem was my firewall.

hehe, it's all good - i'm glad you got it working...

everything running smoothly??

AQG · 08-15-2006, 04:40 PM

yup thanks it's working great
but what opinion can you give me of the question on my previous post?

win32sux · 08-17-2006, 01:09 PM

Quote:

Originally Posted by AQG

yup thanks it's working great
but what opinion can you give me of the question on my previous post?

Quote:

Originally Posted by AQG

question: could it be possible that if i put my proxy connected to the very last switch/router of my net (the last one of my net before it goes out to internet) that my proxy will filter all my MAC's.

MACs don't get routed, so unless you do your VLAN magic, i would think this wouldn't work...

AQG · 08-17-2006, 02:43 PM

Well i'm not a magician jeje, so what can you suggest for my problem?

win32sux · 08-17-2006, 07:26 PM

Quote:

Originally Posted by AQG

Well i'm not a magician jeje, so what can you suggest for my problem?

i would think about running a DHCP daemon for each LAN on each of the routers...

AQG · 08-31-2006, 10:13 AM

Thank you people you've been of great help.
Finally got it working using 3 Dual NIC's, one for each VLAN. This way my proxy knows the MAC's from each VLAN. I wish there was a better way to do this. but any way it's working.

Thank you Again.

acl QUERY urlpath_regex cgi-bin \?

no_cache deny QUERY

acl all src 0.0.0.0/0.0.0.0
acl proxysuse src 127.0.0.1/255.255.255.255
acl manager proto http cache_object

acl full_access_mac arp "/etc/squid/macfree"

acl restricted_access url_regex "/etc/squid/notfree"
acl permited url_regex "/etc/squid/web_pages"

http_access allow myproxy
http_access deny restricted_access
http_access allow full_access_mac !restricted_access
http_reply_access allow all
http_access deny all

icp_access allow proxysuse
icp_access allow full_access_mac
icp_access allow restricted_access
icp_access allow permited

icp_access deny all

http_port 8080
http_port 3128

cache_mem 256 MB
cache_dir ufs /var/cache/squid 800 16 256

cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log

visible_hostname myproxy