Modifying Squid to provide unrestricted use for one IP in LAN

gilliatnet · 03-14-2008, 12:48 PM

Hello,
My LAN server ip is 192.168.0.250:8080
My employees System ip is 192.168.0.101:8080
I want to provide "no restriction" to the above ip i.e; 192.168.0.101:8080
How to configure squid for the above purpose???
Operating system is Red Hat Linux.

Thanks in advance!!

J_Szucs · 03-14-2008, 04:58 PM

"I want to provide "no restriction" to the above ip i.e; 192.168.0.101:8080"

I am a bit confused here. Is that a source ip : port or a destination ip : port?

gilliatnet · 03-16-2008, 10:25 AM

The ip 192.168.0.101:8080 is one of the nodes in my LAN.
and 192.168.0.250 is the server.

I have squid firewall installed in 192.168.0.250 (server).

Squid is made to accept all the http requests from 8080 from all the nodes in the LAN and routed to 3128.

So, ultimately all the nodes in the LAN have firewall imposed by squid for browsing the internet.

I want to make the ip 192.168.0.101 (one of the nodes) to be free from all the firewall restrictions imposed by squid... can you get me sir???

J_Szucs · 03-16-2008, 02:09 PM

I think you should locate and edit this line in squid conf:
acl our_networks src ip1 ip2 ip3

But how do you make sure that the source of the requests can be 8080, only? What are on the nodes making connections?
A browser would use any port available. I suspect that even a proxy would use any port available when making requests, not only its dedidated proxy port.

So, unless you can really make sure that the requests can only come from port 8080, you should not specify any source port, just the source ips.

gilliatnet · 03-23-2008, 01:17 AM

Sir,
The squid is made to listen http requests from 8080. So our browser is configured with 8080 port. The ultimate aim is i need a command to edit squid, for not imposing firewall restriction on 192.168.0.101