RE: [squid-users] Squid Authentication

Hi Rakesh,

Hmmm.. Looks like it should work? Try removing the ACL 'NOSITE' and
replacing

http_access deny NOSITE

with

http_access deny all

Andrew.

-----Original Message-----
From: rakesh [mailto:rakesh@burgan.com]
Sent: Wednesday, 24 September 2003 20:30
To: squid-users@squid-cache.org
Subject: [squid-users] Squid Authentication

Hi,
I have been running the squid proxy quite well with restricted access. Now I
have added three lines (1,2&3) in the configuration for getting
authentication from NT domain, though the authentication works ok but the
user can go to any site. The restriction defined by acl name BBHOME does not
work. Can some one explain why and what is remedy. See the configuration
below:
1. auth_param basic program /usr/local/squid/libexec/msnt_auth NT_dom
2. acl RAKESH proxy_auth REQUIRED
acl BBHOME dstdomain .nai.com
acl BBHOME dstdomain .mcafeeb2b.com
acl BBHOME dstdomain a64.g.akamai.net
##################
acl myhost dst 168.187.148.226/255.255.255.255
acl myhost dst www.webimmune.net
acl NOSITE dstdomain 0.0.0.0/0.0.0.0
acl all src 0.0.0.0/0.0.0.0
####################
http_access allow localhost
http_access allow BBHOME
3. http_access allow RAKESH
http_access allow myhost
http_access deny NOSITE
Cheers,
Rakesh Jha

############################################################################
#########
DISCLAIMER
Any non-official business related views, opinions and other information
presented
in this electronic mail are solely those of the sender/author. Burgan Bank
does not
endorse or accept responsibility for these opinions, views or conclusions.

If you are not the addressee indicated in this electronic mail or
responsible for
delivering this electronic message to the inteded recipient, you should
delete this
message and notify the sender immediately.

Burgan Bank
############################################################################
#########

____________________________________________________________________
CAUTION - This message may contain privileged and confidential
information intended only for the use of the addressee named above.
If you are not the intended recipient of this message you are hereby
notified that any use, dissemination, distribution or reproduction
of this message is prohibited. If you have received this message in
error please notify Air New Zealand immediately. Any views expressed
in this message are those of the individual sender and may not
necessarily reflect the views of Air New Zealand.
_____________________________________________________________________
For more information on the Air New Zealand Group, visit us online
at http://www.airnewzealand.com
_____________________________________________________________________
Received on Wed Sep 24 2003 - 15:39:03 MDT