Re: [squid-users] One Squid and 2 DG Connection Restriction Howto ??

Birol AKBAY wrote:
> Hi,
> I have 2 computers, let say
> A :192.168.0.10
> and
> B : 192.168.0.11
>
> For A,
> Squid 2.6 Stable1, DG 2.9.7.1 are installed.
>
> For B,
> Only DG 2.9.7.5 is installed.
>
> My purpose is;
> Squid must listen only 127.0.0.1:3128(for comp. A) and 192.168.0.28
> for requests from Computer B's IP. Other connection requests should be
> discarded. All requests should be forwarded to squid from DG installed
> on A and B.
>
> To do this;
> I changed http_port to 3128 from 127.0.0.1:3128. In this case, any
> client who can change his/her proxy settings is able to connect proxy
> directly.(As expected) This works, but not suitable for my purpose.
>
> What will be the correct conf?
For what it's worth, I have not migrated to Squid 2.6 yet. These
instructions may not work.

This is extremely simplified, but...

acl DansB src 192.168.0.11
http_access allow DansB
http_access allow localhost
http_access deny all

...should cover your needs. Placement in a full squid.conf is left as
an exercise for the reader (Hint 1: keep the http_access lines listed as
a group. Hint 2: the http_access deny all should already be part of
your squid.conf).
>
> A simple diagram for struc.
> -----------------------------------------------
>
> Client Group 1 ----------------> B
> |
> Client Group 2 ----------------> A ----- Internet
>
>
Chris
Received on Thu Aug 10 2006 - 16:16:01 MDT