[squid-users] Forcing authentication on specific websites (forwarding)

Joshua Rogers jrogers at opera.com
Fri Mar 12 19:00:59 UTC 2021


Hi Alex,

Thank you, that works perfectly.

Cheers,
Josh

On Fri, Mar 12, 2021 at 7:50 PM Alex Rousskov <
rousskov at measurement-factory.com> wrote:

> On 3/12/21 12:17 PM, Joshua Rogers wrote:
>
> > I am hoping to allow access to all websites through squid except certain
> > websites. Sites which are not allowed will require authentication.
> >
> > I tried this configuration:
> > http_access allow all
>
> Game over. The order of http_access rules matters. The first matching
> rule wins. An always-matching "all" rule renders any further http_access
> rules useless.
>
> I have not tested this, but I would start with something like this:
>
>     http_access allow google google_users
>     http_access deny google
>     http_access allow all
>
> Alex.
>
>
> > acl my_auth proxy_auth REQUIRED
> > acl google_users proxy_auth user1 user2 user3
> > acl google dstdomain .google.com <http://google.com>
> > http_access deny google !google_users
> > http_access allow my_auth
> >
> > but it simply allowed access to all websites instead of blocking *only*
> > .google.com <http://google.com>.
> >
> > Is this sort of configuration possible with Squid, and if so, how can it
> > be done?
> >
> > Cheers,
> > Josh
> >
> > _______________________________________________
> > squid-users mailing list
> > squid-users at lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users
> >
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20210312/92b55b2d/attachment.htm>


More information about the squid-users mailing list