up vote 0 down vote favorite
share [g+] share [fb]

I have 10 ip's on a VPS and squid3 installed. I want to lease all of them to 10 co-workers. The authentication should be ip-based.

Basically I want to allow only their home ip address (not internal - we're not on a network) to connect to my squid. I would also like to offer them a dedicated ip from my outgoing addresses. I managed to get it working using username/password based authentication but some software do not support that feature so I would like to switch to this limit if possible.

Any guidance/sample acl's?

link|improve this question
Can we assume that the home IP's are statically assigned? – racyclist Jun 3 '10 at 18:36
yes, all home ip's are static. – Ian R. Jun 3 '10 at 18:40
feedback

1 Answer

up vote 2 down vote

Make an ACL like

acl coworkers 10.0.0.1
acl coworkers 10.0.0.2

to add single IPs to an ACL. For a network:

acl coworkers 10.0.0.0/8

then include an http_access line:

http_access allow coworkers
link|improve this answer
"Basically I want to allow only their home ip address (not internal - we're not on a network) to connect to my squid. I would also like to offer them a dedicated ip from my outgoing addresses." – Ian R. Jun 4 '10 at 0:38
Edited my sample acl to include networks. – Cory J Jun 4 '10 at 19:47
feedback

Your Answer

 
or
required, but never shown
discard