squid question (banned ip or block)

hebeles · 05-29-2011, 05:03 PM

greetings,

my server squid 2.7 works. i would like to ask a question.

i watch the tail -f access.log

i see access.log flooding activity of a ip number e.g 1.1.1.1, 1.2.3.4, 2.3.3.3, 1.1.3.4 (4-attack the ip's)

i want block or banned the IP numbers?

i want not use this ip squid/my proxy ip number e.g 1.1.1.1, 1.2.3.4, 2.3.3.3, 1.1.3.4 numbers.

my english-basic. sorry.

thanks

mario.almeida · 05-30-2011, 05:52 AM

Hi,

So you want to block 1.1.1.1, 1.2.3.4, 2.3.3.3 and 1.1.3.4 IP address?

networking.dept · 05-30-2011, 06:02 AM

Hello,

Create acl like below :-

In squid.conf you'll find a entry like "INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS" exact after this line enter following lines into your /etc/squid/squid.conf

acl denyip src 1.1.1.1 1.2.3.4 2.3.3.3 1.1.3.4
http_access deny denyip

save & exit from file and then execute this command as a root /etc/init.d/squid reload

Make sure you have not allowed everything before this rule otherwise this settings will not apply.

Hope this helps.