squid acl

Winanjaya · 04-23-2009, 10:57 AM

Dear All,

I have 2 files "lst_users" contained list of user's mac address
and "lst_freesites" contained list of allowed sites for guest users
(user with unrecognized mac address)

users with recognized mac address are allowed to visit to all of internet sites.
users with un-recognized mac address are required to enter valid user id and password if he/she want to access to all of internet sites.

I am running squid 3 on my FC 10..

any body please help me what should I do with squid?

many thanks in advance

Regards
Winanjaya

chitambira · 04-23-2009, 12:03 PM

Not all operating systems supports Mac address based filtering. Squid calls these "ARP ACLs" and they are supported on Linux, Solaris, and BSD variants.

rebuild your squid with mac filtering support:
# ./configure –enable-arp-acl …
# make clean
# make

Then in your squid.conf:

auth_param basic program /yo_auth/program_here
auth_param basic children 10
auth_param basic realm "Your Org Real Here"
auth_param basic credentialsttl 5 minutes

acl authed proxy_auth REQUIRED
acl known_macs arp lst_users
acl freesites dstdomain lst_freesites

http_access allow known_macs
http_access allow !known_macs authed freesites
http_access deny all