Hi, i have configure a squid proxy server for simple use below is what i have change on /etc/squid/squid.conf

I just configure 3 lines in /etc/squid/squid.conf

1. Visible_hostname

2. acl our_networks src 192.168.1.0/24
http_access allow our_networks

3. #http_access deny all

than run command # squid -z to create a swap file.

i try on client side is ok. But i need a basic security, like when client want to use it than need to keyin username and password, how to configure in squid?

Thank.

There's some useful info on this at the Squid FAQ. If you search that page for basic, you should find what you need.

Why not use a routing distro that has this built in into the web gui.

Try PFSense

Hi,

I like to share with u the squid conf file that we used to administer a academic environment with different ip range on different lab. Actually, I had edited some lines for easy understanding. If u want to ban some sites u can add an entry on /etc/banlist file and then
reload the squid.

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

acl mil src 192.168.2.0/255.255.255.0
#acl barch src 192.168.5.0/255.255.255.0
acl mca src 192.168.3.0/255.255.255.0
#acl cadcam src 192.168.9.0/255.255.255.0
acl dsplab src 192.160.70.0/255.255.255.0
#acl melab src 192.168.6.0/255.255.255.0
acl eeelab src 192.168.12.0/255.255.255.0
acl itlab src 192.168.7.0/255.255.255.0
acl aero src 192.168.59.0/255.255.255.0
acl civil src 192.168.15.0/255.255.255.0




acl cadcam src 192.168.9.251 192.168.9.252 192.168.9.253
acl melab src 192.168.6.5 192.168.6.6 192.168.6.10 192.168.6.11
acl barch src 192.168.5.10 192.168.5.11 192.168.5.12 192.168.5.13
192.168.5.14

acl banned url_regex -i "/etc/banlist"
acl banned url_regex "/etc/banlist"

http_access allow manager localhost
http_access deny manager


http_access allow melab
http_access allow barch
http_access allow dsplab
http_access allow cadcam
http_access allow mil
http_access allow eeelab
http_access allow itlab
http_access allow aero
http_access allow civil
http_access allow mca


http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access allow localhost
http_access deny all

Usually switching distros isn't an option in a production environment.

Hocheetiong, if you follow the link gilead posted, you should find what you need.

-TDS-