[squid-users] Sslbump with multiple users and multiple ACLs for each

stressedtux stressedtux at hotmail.com
Thu Jan 3 20:26:24 UTC 2019


Ty guys. I think i was finally able to solve it. 

For those who have the same problem, this was my solution:



#### Proxy Port
http_port 80 


################################
#### BEGIN  
################################

##  ACLs localnet
acl localnet src XXX.XXX.0.0/16	# My Network1
acl localnet src XXX.XXX.0.0/16	# My Network2

# ACLs Ports
acl http proto http
acl port_80 port 80
acl port_443 port 443
acl CONNECT method CONNECT


### 
auth_param basic program /usr/lib64/squid/basic_ncsa_auth
/etc/squid/passwords
auth_param basic realm proxy
acl authenticated proxy_auth REQUIRED

#########

#### Auth parameters
auth_param basic program /usr/lib64/squid/basic_ncsa_auth
/etc/squid/passwords
auth_param basic realm proxy
acl authenticated proxy_auth REQUIRED


##### Rules for global users, non-authenticated - "Global Whitelist"
acl global_whitelist dstdomain "/etc/squid/global_whitelist"
http_access allow http localnet port_80 global_whitelist
http_access allow CONNECT localnet port_443 global_whitelist


##### Rule for autenticated user stressedtux
acl login_stressedtux proxy_auth stressedtux
acl sites_stressedtux dstdomain "/etc/squid/sites_stressedtux.txt"
http_access allow http port_80 localnet sites_stressedtux login_stressedtux
http_access allow CONNECT port_443 localnet sites_stressedtux
login_stressedtux


##### Rules for autenticated users of "group" usrgrp1
acl login_usrgrp proxy_auth "/etc/squid/list_users_usrgrp1.txt"
acl sites_usrgrp dstdomain "/etc/squid/sites_usrgrp1.txt"
http_access allow http port_80 localnet sites_usrgrp login_usrgrp
http_access allow CONNECT port_443 localnet sites_usrgrp login_usrgrp

##### Block everything else
http_access deny all


################################
#### END
################################







--
Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html


More information about the squid-users mailing list