[squid-users] guideline on limiting users per IP

[Amos Jeffries]

On 12/01/2016 7:54 a.m., 3 wrote:
> 
> The version on Debian is 3.5.12 and but still max_user_ip does not work at
> all and squid in verbose mode does not reject it but go through it
> correctly, so I m bit confused. The authentication is against AD win 2008.
> 
> I will send the more details later on but If somebody could confirm
> regarding the compatibility between the version and the max_user_ip/ AD
> authentication.

All versions of Squid since 2.4 support the max_user_ip ACL.

It does only apply to username based authentication (eg Basic) though.
Token based authentication, particularly ones where the token changes
per TCP connection (eg NTLM, Kerberos) or per message (eg Digest) do not.

Amos