User Tools
авторизация_доступа_к_ресурсам_через_squid
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
авторизация_доступа_к_ресурсам_через_squid [2021/02/24 13:29] val |
авторизация_доступа_к_ресурсам_через_squid [2026/09/17 15:50] (current) val [Debian/Ubuntu] |
||
|---|---|---|---|
| Line 6: | Line 6: | ||
| ==== Debian/Ubuntu ==== | ==== Debian/Ubuntu ==== | ||
| <code> | <code> | ||
| - | gate# cat /etc/squid/deny_hosts.txt | + | gate# cat /etc/squid/deny_urls.txt |
| </code><code> | </code><code> | ||
| - | .*ok\.ru.* | + | ok\.ru |
| - | .*vk\.com.* | + | vk\.com |
| </code> | </code> | ||
| <code> | <code> | ||
| - | gate# cat /etc/squid/permit_hosts.txt | + | gate# cat /etc/squid/permit_domains.txt |
| </code><code> | </code><code> | ||
| - | .*microsoft\.com.* | + | .debian.org |
| + | .linux.org.ru | ||
| </code> | </code> | ||
| Line 28: | Line 29: | ||
| acl big_boss src 192.168.113.100 192.168.100+X.101 | acl big_boss src 192.168.113.100 192.168.100+X.101 | ||
| - | acl deny_hosts url_regex "/etc/squid/deny_hosts.txt" | + | acl deny_urls url_regex "/etc/squid/deny_urls.txt" |
| - | acl permit_hosts url_regex "/etc/squid/permit_hosts.txt" | + | acl permit_domains dstdomain "/etc/squid/permit_domains.txt" |
| + | # order is important | ||
| http_access allow big_boss | http_access allow big_boss | ||
| - | http_access allow our_pppoe_networks !deny_hosts | + | http_access allow our_pppoe_networks !deny_urls |
| - | http_access allow our_networks permit_hosts | + | http_access allow our_networks permit_domains |
| ... | ... | ||
| </code><code> | </code><code> | ||
| Line 44: | Line 46: | ||
| <code> | <code> | ||
| - | gate# cat /etc/squid/squid.conf | + | gate# cat /etc/squid/conf.d/my.conf |
| </code><code> | </code><code> | ||
| ... | ... | ||
| - | # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS | ||
| - | ... | ||
| - | # Access for all success authentificated users | ||
| #acl inetuser proxy_auth REQUIRED | #acl inetuser proxy_auth REQUIRED | ||
| - | + | #acl inetuser proxy_auth user1@CORP13.UN user2@CORP13.UN | |
| - | # Ассеss for users from list | + | acl inetuser proxy_auth_regex "/etc/squid/group1.acl" |
| - | #acl inetuser proxy_auth user1@CORPX.UN user2@CORPX.UN ... | + | |
| - | + | ||
| - | # Ассеss for users from file | + | |
| - | #acl inetuser proxy_auth_regex "/etc/squid/group1.acl" | + | |
| http_access allow inetuser | http_access allow inetuser | ||
| - | http_access deny all | ||
| - | ... | ||
| </code> | </code> | ||
авторизация_доступа_к_ресурсам_через_squid.1614162588.txt.gz · Last modified: 2021/02/24 13:29 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
