Re: [SQU] Bypass squid authentication

Hi,

acl line order isnt important. Only http_access line order is important.

acl LAN src 128.0.0.0/8 (or whatever of your LAN's IP)
acl vips src 128.1.2.240/32
acl users proxy_auth REQUIRED
..
http_access allow vips
http_access allow LAN users
http_access deny all

This conf works on my squid.

Regards,
Ilker G.

> -----Özgün Ýleti-----
> Kimden: Bruno Guerreiro [mailto:bruno.guerreiro@ine.pt]
> Tarih: Wednesday, January 10, 2001 4:55 PM
> Kime: 'Onzin Geneuzel'; squid-users@ircache.net
> Konu: RE: [SQU] Bypass squid authentication
>
>
> Hy,
> Did you tried placing the VIPS acl before the ALL acl?
> ---//---
> ...
> acl vips src 128.1.2.240/255.255.255.255
> acl all src 0.0.0.0/0.0.0.0
> ...
>
> ---//---
> Regards,
>
> Bruno Guerreiro
>
> -----Original Message-----
> From: Onzin Geneuzel [mailto:lsuykerbuyk@hotmail.com]
> Sent: Quarta-feira, 10 de Janeiro de 2001 14:12
> To: squid-users@ircache.net
> Subject: Re: [SQU] Bypass squid authentication
>
>
> Try'd that.. didn't work.. It just keeps asking for my username and
> password!
>
>
> >
> >I'd try
> >acl vips src 128.1.2.240/255.255.255.255
> >
> >Rob
> >
> >----- Original Message -----
> >From:
> >To: <robert.collins@itdomain.com.au>
> >Sent: Thursday, January 11, 2001 12:45 AM
> >Subject: Re: [SQU] Bypass squid authentication
> >
> >
> > > Squid ip is 128.1.2.202; Vip user is 128.1.2.240..
> > >
> > > Hope that helps!
> > >
> > >
> > > > > Can anyone help me with the following:
> > >
> > > I have a squid configuration file with allows 'vips' to
> bypass the user
> > > > > authentication. To make this work I placed the acl
> for vips on top
> >and
> > > >made
> > > > > the http_access for vips the first one in the list.
> However it still
> > > >asks
> > > > > the specific host for a username and password.. What
> am I doing
> >wrong?!
> > > > >
> > > > > Conf. file:
> > > > >
> > > > > http_port 80
> > > > >
> > > > > cache_mem 10 mb
> > > > > cache_effective_user squid
> > > > > cache_effective_group nogroup
> > > > >
> > > > > authenticate_program /var/spool/squid/smb_auth -W MARK
> > > > >
> > > > > acl all src 0.0.0.0/0.0.0.0
> > > > >
> > > > > acl vips src 128.1.2.240
> > > > > acl manager proto cache_object
> > > > > acl localhost src 127.0.0.1/255.255.255.255
> > > > > acl users proxy_auth REQUIRED
> > > > > acl SSL_ports port 443 563
> > > > > acl Safe_ports port 81 80 21 443 563 70 210 1025-65535
> > > > > acl CONNECT method CONNECT
> > > > >
> > > > > acl argo dstdomain .mark.nl
> > > > > always_direct allow mark
> > > > >
> > > > > http_access allow vips
> > > > > http_access allow users
> > > > > http_access allow manager localhost
> > > > > http_access deny manager
> > > > > http_access deny !Safe_ports
> > > > > http_access deny CONNECT !SSL_ports
> > > > > http_access deny all
> > > > > #http_access allow all
> > > > > icp_access allow all
> > > > > miss_access allow all
> > > > >
>
> ______________________________________________________________
> ___________
> Get Your Private, Free E-mail from MSN Hotmail at
> http://www.hotmail.com.
>
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
>
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
>

Bu e-postada bulunan tüm fikir ve görüsler ve ekindeki dosyalar sadece adres
sahib(ler)ine ait olup, Sümerbank A.S hiç bir sekilde sorumlu tutulamaz.
The information contained in this E-Mail and any files transmitted with it
are intended solely for the use of the individual or entity to whom they are
addressed and do not reflect those of Sumerbank A.S.

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html