This is an old revision of the document!
[gate:~] # cd /usr/local/etc/squid/
root@gate:~# cd /etc/squid/
gate# cat deny_hosts.txt .*odnok.* .*com\/.* gate# cat squid.conf ... # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS ... acl our_networks src 192.168.100+X.0/24 acl full_access src 192.168.100+X.100 127.0.0.1 #For FreeBSD acl deny_hosts url_regex "/usr/local/etc/squid/deny_hosts.txt" #For Ubuntu acl deny_hosts url_regex "/etc/squid/deny_hosts.txt" http_access allow full_access http_access allow our_networks !deny_hosts ... gate# squid -k check gate# squid -k reconfigure
gate# cat squid.conf ... # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS ... # Access for all success authentificated users #acl inetuser proxy_auth REQUIRED # Ассеss for users from list #acl inetuser proxy_auth user1@CORPX.UN user2@CORPX.UN ... # Ассеss for users from file acl inetuser proxy_auth_regex "/etc/squid/group1.txt" http_access allow inetuser http_access deny all
gate# members group1 | tr " " "\n" > /etc/squid/group1.txt gate# pw groupshow group1 | cut -f4 -d: | tr "," "\n" > /usr/local/etc/squid/squid.conf gate# squid -k reconfigure
gate# ntlm_auth --username=user1 --require-membership-of=CORPX\\group2