Re: Re: [squid-users] can Squid identify the client who come from another proxy

From: Henrik Nordstrom <hno@dont-contact.us>
Date: 10 Mar 2003 10:59:56 +0100

Yes. See the documentation of the login= cache_peer option.

Note: This is in the configuration of the peer, not your proxy.

Regards
Henrik

mån 2003-03-10 klockan 09.51 skrev Tran Tien Dung:
> Hi Henrik,
> Because of there is a option of cache_peer (login=user:passwd) so could I
> can found the user who used shared proxies ?
> Best regards,
> =====================================
> Tran Tien Dung
> D. Manager
> Information System Section
> Fujitsu Company Products of Viet nam, Inc.
> Tel : 84-61-836563 Ext: 342
> Cell : +84908001081
> COINS: 79691-342
> E-Mail : ttdung@fcv.fujitsu.com
> =====================================
> ----- Original Message -----
> From: "Henrik Nordstrom" <hno@squid-cache.org>
> To: "NetSnake" <netsnake@963.net>; <squid-users@squid-cache.org>
> Sent: Monday, March 10, 2003 3:20 PM
> Subject: Re: Re: [squid-users] can Squid identify the client who come from
> another proxy
>
>
> > On Monday 10 March 2003 08.28, NetSnake wrote:
> > > I want to deny all of who use a proxy
> > > access to me. For example, user 192.168.0.5 can access to internet,
> > > 192.168.0.10 can not, then 192.168.0.5 running a proxy server,
> > > 192.168.0.10 connecting to 192.168.0.5's proxy and he can access to
> > > internet, they all access to internet via my proxy at last. can I
> > > indentify the request which come from 192.168.0.5, and which come
> > > from 192.168.0.5 (via 192.168.0.10's proxy) ? Thanks a lot
> >
> > Not entirely trivial but by using user authentication you get very
> > far. By using authentication you can identify the user who initiated
> > the request no matter from where or via what proxies.
> >
> > You also need a policy of use which denies sharing of the users proxy
> > account.
> >
> > Regards
> > Henrik

-- 
Henrik Nordstrom <hno@squid-cache.org>
MARA Systems AB, Sweden
Received on Mon Mar 10 2003 - 03:00:16 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:13:58 MST