Re: Authentication + IP checking

Hi,
  You can do passwd authentication combining with IP
Address.
In your squid.conf file, you can have like this

acl john proxy_auth joh
acl mary proxy_auth mar
acl ipjohn src 172.16.1.33
acl ipmary src 172.16.1.35

http_access allow john ipjohn
http_access allow mary ipmary
#http_access allow all

This limits the users to login ONLY from their
machines (only on their IP adresses)
Mary acnnot able to use her username/password in
John's machine and vice-versa.

regards
visolve cache
visolve.com
http://www.visolve.com

--- Gustavo Viscaino <g_viscaino@yahoo.com> wrote:
> Hello to everyone on the list!
>
> I'm having some trouble trying to solve this
> problem... I have got authentication working in
> Squid
> pretty well (with the proxy_auth ACL stuff). What I
> am
> desperately trying to do is limit the users to login
> ONLY from their machines (only on their IP
> adresses).
>
> There are only 10 IP addresses allowed to surf the
> web
> today, using Squid as the proxy server (the rest of
> the network can't access port 3128; the firewall
> rules
> block it). What I am trying to do is avoid that EVEN
> people who are allowed to surf the web do it outside
> their PCs. Kinda "lock" the username + password to
> the
> machine's IP adresses.
>
> For example: today, say, John has a username and
> password. His IP address in our network is
> 10.1.1.130.
> Mary also has her username and her password and her
> IP
> address is 10.1.1.131. I don't want her to be able
> to
> use her username/password in John's machine and
> vice-versa. I know this sounds paranoid and it is
> ;-)
> but I just receive orders anyway :)
>
> If someone has any helpful trick, I'd be REALLY
> thankful!!
>
> Gustavo Viscaino
> System Administrator
> __________________________________________________
> Do You Yahoo!?
> Talk to your friends online with Yahoo! Messenger.
> http://im.yahoo.com
>
>
__________________________________________________
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com
Received on Wed Jan 19 2000 - 22:11:52 MST