Re: [squid-users] Squid Server With Multiple Outgoing IPs, each ip with separate login and password

From: Chris Robertson <crobertson_at_gci.net>
Date: Mon, 26 Oct 2009 17:39:10 -0800

Leonardo Rodrigues wrote:
> Франсуа Мартiнес escreveu:
>> Hi!
>>
>> i am going to buy dedicated server and organize proxy server.
>> server has 250 IPs.
>> I want each outgoing ip address to have its own login and password.
>>
>> so i give client ip with login and password.
>>
>> so i want to bind each outgoing ip witt login-password.
>>
>> can someone help me in reccomendation?
>> thx
>>
>
> first of all get some authentication method fully configurated, i'll
> skip that part because i dont know what you're using. And for getting
> an auth method working, there's still LOTS of tutorials on the web.
> Google for it if you dont know how to do it.

Agreed so far...

>
>
> acl myport001 myport 10001
> acl username001 proxy_auth -i username001
>
> http_access allow myport001 username001
> http_access deny myport001

The parent poster has lots of IPs. What he seems to want to do is use
one server to pass traffic in and out the same IP per client.

# Allow username001 to authenticate when accessing the proxy at 192.168.45.1
acl cust001IP myIP 192.168.45.1
acl cust001name proxy_auth -i username001
http_access allow cust001name cust001IP
# Deny all other access to this IP
http_access deny cust001IP
# Route traffic that came in on 192.168.45.1 to go out 192.168.45.1
tcp_outgoing_address 192.168.45.1 cust001IP

acl cust002IP myIP 192.168.45.2
acl cust002name proxy_auth -i username002
http_access allow cust002name cust002IP
http_access deny cust002IP
tcp_outgoing_address 192.168.45.2 cust001IP

...and so on.

> acl myport002 myport 10002
> acl username002 proxy_auth -i username002
>
> http_access allow myport002 username002
> http_access deny myport002
>
>
> ....... and there it goes ........
>
>
> this will give you a big config, i cant think on a 'simple' (few
> lines) config to acchieve that. But it will work for sure !

Agreed. The config will be a monster. But it is workable.

Chris
Received on Tue Oct 27 2009 - 01:39:23 MDT

This archive was generated by hypermail 2.2.0 : Tue Oct 27 2009 - 12:00:03 MDT