<div dir="ltr">This should do it<div><br></div><div><div>acl Allowed_IPs src "/etc/squid/Allowed_IPs.txt"</div><div>http_access allow Allowed_IPs</div><div><br></div><div>auth_param basic program /usr/lib/squid3/basic_ncsa_auth /etc/squid/passwd</div><div>auth_param basic children 5</div><div>auth_param basic realm Squid proxy-caching web server</div><div>auth_param basic credentialsttl 2 hours</div><div>auth_param basic casesensitive off</div><div><br></div><div>acl ncsa_users proxy_auth REQUIRED</div><div>http_access allow ncsa_users</div><div><br></div><div>acl SSL_ports port 443</div><div>acl Safe_ports port 80</div><div>acl Safe_ports port 21</div><div>acl Safe_ports port 443</div><div>acl Safe_ports port 70</div><div>acl Safe_ports port 210</div><div>acl Safe_ports port 1025-65535</div><div>acl Safe_ports port 280</div><div>acl Safe_ports port 488</div><div>acl Safe_ports port 591</div><div>acl Safe_ports port 777</div><div>acl CONNECT method CONNECT</div><div>http_access deny !Safe_ports</div><div>http_access deny CONNECT !SSL_ports</div><div>http_access allow localhost manager</div><div>http_access deny manager</div><div>#http_access allow localhost</div><div>http_access deny all</div><div>#http_port 3128</div><div>coredump_dir /var/spool/squid</div><div>refresh_pattern ^ftp: 1440 20% 10080</div><div>refresh_pattern ^gopher: 1440 0% 1440</div><div>refresh_pattern -i (/cgi-bin/|\?) 0 0% 0</div><div>refresh_pattern . 0 20% 4320</div></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 13, 2018 at 11:30 PM, xpro <span dir="ltr"><<a href="mailto:xpro6000@gmail.com" target="_blank">xpro6000@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p><span style="color:rgb(36,39,41);font-family:Arial,"Helvetica Neue",Helvetica,sans-serif;font-size:15px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:left;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;display:inline!important;float:none">Right now I'm using Squid with IP
based authentication. Would it be possible to also allow the
user access if their IP is not allowed, but they provide
username/pass?</span></p>
</div>
<br>______________________________<wbr>_________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.<wbr>org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/<wbr>listinfo/squid-users</a><br>
<br></blockquote></div><br></div>