Squid group access

guy_ripper · 06-18-2007, 01:19 PM

Hi Experts,

I have installed squid and dansguardian for my proxy server. The service is working fine. I just want to know if squid or dansguardian can setup a user-group policy access. Let say, Group A has this access while Group B has a different sites that they can access. Of course, this should be ran in a single box proxy. Is that possible in squid. If so, can you give sort of steps how I am going to install.

Thanks for your thoughts.....

acid_kewpie · 06-20-2007, 01:53 AM

depends how you wish to define "groups" but yes that's certainly possible with squid... if you put, for example the ip addresses of beach group in a seperate ACL then you can match those groups up with different destination domains

acl groupA src 192.168.0.10 192.168.0.11
acl groupB src 192.168.0.40 192.168.0.41
acl listA dstdomain .ebay.co.uk
acl listB dstdomain .google.com

http_access allow GroupA listA
http_access allow GroupB listB
http_access deny all

so group A can go to ebay, group B can go to google but neither can go anywhere else.

opensourcedevelopmen · 06-20-2007, 02:27 AM

http://www.linuxhomenetworking.com/w...ess_with_Squid
Regards

guy_ripper · 06-20-2007, 11:31 AM

Hi Acid...

Thanks for your thoughts...

How I can declare a lists of blacklists in squid. Let say, GroupA and GroupB have each own whitelists(sites accessible) and blacklists(not allowed sites).

Thanks in advance

p_s_shah · 06-21-2007, 01:30 AM

Code:

acl groupA src 192.168.0.10 192.168.0.11
acl groupB src 192.168.0.40 192.168.0.41

acl GoodSitesA dstdomain "/usr/local/etc/allowed-sitesA.squid"
acl BadSitesA  dstdomain "/usr/local/etc/restricted-sitesA.squid"

acl GoodSitesB dstdomain "/usr/local/etc/allowed-sitesB.squid"
acl BadSitesB  dstdomain "/usr/local/etc/restricted-sitesB.squid"

http_access allow GroupA GoodSitesA
http_access deny GroupA BadSitesA

http_access allow GroupB GoodSitesA 
http_access deny GroupB BadSitesB

guy_ripper · 06-21-2007, 12:02 PM

wow @p_s_shah! that's sweet...

Thanks a lot....

acid_kewpie · 06-21-2007, 01:00 PM

well it's not really... this is squid 101...

inaki · 07-28-2008, 04:26 AM

can we define a acl based on the authentication user id or group the user id into several group and specific the access rules for each group.

acid_kewpie · 07-28-2008, 06:15 AM

Please do not drag up dead threads. if you have a new question, please start a new thread.