RE: [squid-users] blocking external users on a bridge whenfirewall is disabled

Thanks for the quick response. I have the following in my squid ACL it just
seems a bit strange that I am only letting in local traffic and external
traffic is getting in. I am using dansguardian as a content filter.

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
http_access allow manager
http_access allow localhost
http_access deny all

Kind Regards
 
William

-----Original Message-----
From: Henrik Nordstrom [mailto:henrik@henriknordstrom.net]
Sent: 14 September 2006 08:10
To: William Bohannan
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] blocking external users on a bridge whenfirewall
is disabled

ons 2006-09-13 klockan 19:39 +0000 skrev William Bohannan:

> goes overtime on caching and external users start using it? Is there a
way
> to make squid only accept connections from my internal interface? I am
> running two nics in bridge mode.

Yes.

The default squid.conf shipped with Squid reads:

# TAG: http_access
# Allowing or Denying access based on defined access lists
[...]

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

# Example rule allowing access from your local networks. Adapt
# to list your (internal) IP networks from where browsing should
# be allowed
#acl our_networks src 192.168.1.0/24 192.168.2.0/24
#http_access allow our_networks

# And finally deny all other access to this proxy
http_access deny all

Regards
Henrik
Received on Thu Sep 14 2006 - 02:47:04 MDT