Re: squid , apache n PF

2007-02-16 Thread sonjaya

sory have been solved , only set need set in squid.conf

On 2/16/07, sonjaya <[EMAIL PROTECTED]> wrote:

Dear all

I have machine running squid  n  apache at OBSD also set as
transparent proxy with pf .
Now i have limit who can use that proxy ( of course limit by ip in squid conf).
The problem show when ip non allow acces the proxy  access webserver
at  that machine proxy always  get denied.

int---proxy (192.168.0.8)-ip allow
int---proxy(192.168.0.7)-ip allow2

ipallow2 using gateway = 192.168.0.7
ipallow using gateway = 192.168.0.8

here my squid.conf
acl parno url_regex -i "/usr/local/squid/etc/parno.txt"
acl ipallow src "/usr/local/squid/etc/ip-allow.txt"
http_access deny parno
http_access allow  ipallow
http_access deny  all


then i change squid.conf  like this :
acl ipallow2 src "/usr/local/squid/etc/ip-allow2.txt"
acl parno url_regex -i "/usr/local/squid/etc/parno.txt"
acl ipallow src "/usr/local/squid/etc/ip-allow.txt"
http_access allow ipallow2
http_access deny parno
http_access allow  ipallow
http_access deny  all

with second squid.conf that is working , but another problem show ,
when ipallow2 change  ip gateway to 192.168.0.8 they can access
internet by proxy in 192.168.0.8.

so how to configure ipallow2 can access the webserver in 192.168.0.8
without allow ipallow2  using proxy when change the gateway to
192.168.0.8


-sonjaya-
htpp://sicute.blogspot.com




--
-sonjaya-



squid , apache n PF

2007-02-15 Thread sonjaya

Dear all

I have machine running squid  n  apache at OBSD also set as
transparent proxy with pf .
Now i have limit who can use that proxy ( of course limit by ip in squid conf).
The problem show when ip non allow acces the proxy  access webserver
at  that machine proxy always  get denied.

int---proxy (192.168.0.8)-ip allow
int---proxy(192.168.0.7)-ip allow2

ipallow2 using gateway = 192.168.0.7
ipallow using gateway = 192.168.0.8

here my squid.conf
acl parno url_regex -i "/usr/local/squid/etc/parno.txt"
acl ipallow src "/usr/local/squid/etc/ip-allow.txt"
http_access deny parno
http_access allow  ipallow
http_access deny  all


then i change squid.conf  like this :
acl ipallow2 src "/usr/local/squid/etc/ip-allow2.txt"
acl parno url_regex -i "/usr/local/squid/etc/parno.txt"
acl ipallow src "/usr/local/squid/etc/ip-allow.txt"
http_access allow ipallow2
http_access deny parno
http_access allow  ipallow
http_access deny  all

with second squid.conf that is working , but another problem show ,
when ipallow2 change  ip gateway to 192.168.0.8 they can access
internet by proxy in 192.168.0.8.

so how to configure ipallow2 can access the webserver in 192.168.0.8
without allow ipallow2  using proxy when change the gateway to
192.168.0.8


-sonjaya-
htpp://sicute.blogspot.com