Re: [squid-users] Mac address based restriction

 yes you can use access list
acl allowedpc src 192.168.0.10 192.168.0.12 192.168.0.23
http_access allow allowedpc
http_access deny all
 
you can define range too
acl allowedpc src 192.168.0.10-192.168.0.20

http_access allowedpc allow

http_access deny

will allow 10 to 20 ip address computer borwsing

Masood Ahmad Shah

System Engineer

Superior College lahore Pakistan

 
 
  "Visolve.com" <squid@visolve.com> wrote: Hello santharam,

You can use arp acl.

To use ARP (MAC) access controls, you first need to compile in the optional
code. Do this with the --enable-arp-acl configure option:

% ./configure --enable-arp-acl ...
% make clean
% make

Note 1: If src/acl.c doesn't compile, then ARP ACLs are probably not
supported on your system.

If everything compiles, then you can add some ARP ACL lines to your
squid.conf

Usage
acl aclname arp ARP-ADDRESS
Example
acl ACLARP arp 11:12:13:14:15:16
ACLARP refers MACADDRESS of the ethernet 11:12:13:14:15:16

Note 2: Squid can only determine the MAC address for clients that are on the
*same* subnet(i.e. ARP acl checks only work for the local ethernet lan. If
the user is behind a router then the MAC address is that of the router). If
the client is on a different subnet, then Squid cannot find out its MAC
address.

If you've still problem, try to send squid.conf and specify the version of
squid that you are using.

Thanks and Regards,
-Sathyan
http://www.visolve.com
Get Unlimited Squid Support .Click http://squid.visolve.com/Vi_support.pdf
for details.

> Hi ,
> I want to allow htttp access only for certain computers.Is there
> any way to restrict the http access using hardware address.
>
> Thanks
> santha
> _________________________________________________________
> Click below to visit monsterindia.com and review jobs in India or
> Abroad
> http://monsterindia.rediff.com/jobs

---------------------------------
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
Received on Sun May 19 2002 - 03:36:38 MDT