[squid-users] squid user session/connections control

[Amos Jeffries]

On 26/08/2016 7:05 a.m., --Ahmad-- wrote:
> Hi dear “squid users “
> 
> i have a question in mind on how can i limit connections for a user that is connected using AUTH_NTLM method 

Why?


> i already added the directives below :
> 
> as example  , user will connect to squid and have only 50 max connections .

The config you presented will allow 100 connections, and uses Basic
authentication.

> 
> im not sure how can i limit the connections per user connection not per ip 
> 

You can't. The user has to already have an accepted open connection for
authentication to be performed. Particularly with NTLM that requires +2
connections before you ever find out what the username is. Once you have
authentication it is too late to undo.


> 
> 
> 
> hope to help 
> 
> I’m using squid 3.5.2
> 

Please upgrade. That is a very old and insecure version. Several attacks
are now widely available.

Amos