Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have 10 ip's on a VPS and squid3 installed. I want to lease all of them to 10 co-workers. The authentication should be ip-based.

Basically I want to allow only their home ip address (not internal - we're not on a network) to connect to my squid. I would also like to offer them a dedicated ip from my outgoing addresses. I managed to get it working using username/password based authentication but some software do not support that feature so I would like to switch to this limit if possible.

Any guidance/sample acl's?

share|improve this question
    
Can we assume that the home IP's are statically assigned? –  racyclist Jun 3 '10 at 18:36
    
yes, all home ip's are static. –  Ian R. Jun 3 '10 at 18:40

1 Answer 1

Make an ACL like

acl coworkers 10.0.0.1
acl coworkers 10.0.0.2

to add single IPs to an ACL. For a network:

acl coworkers 10.0.0.0/8

then include an http_access line:

http_access allow coworkers
share|improve this answer
    
"Basically I want to allow only their home ip address (not internal - we're not on a network) to connect to my squid. I would also like to offer them a dedicated ip from my outgoing addresses." –  Ian R. Jun 4 '10 at 0:38
    
Edited my sample acl to include networks. –  Cory J Jun 4 '10 at 19:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.