linux-admin.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: "Adrian C." <drupix@gmail.com>
To: fluca1978@infinito.it
Cc: linux-admin@vger.kernel.org
Subject: Re: squid acls
Date: Thu, 21 Apr 2005 10:19:49 +0300	[thread overview]
Message-ID: <42675415.5050604@gmail.com> (raw)
In-Reply-To: <200504210911.22672.fluca1978@infinito.it>

I think it's best for you to use INPUT chain for such filtering. Just 
match port number for squid.

--Adrian.

Luca Ferrari wrote:

>On Wednesday 20 April 2005 21:25 Richard Nairn's cat walking on the keyboard  
>wrote:
>
>  
>
>>Hi Luca
>>
>>It can be done. The FAQ says so...
>>
>>The access control has the "arp" keyword. According the FAQ you have to
>>have compiled squid with the --enable-arp-acl switch to enable this.
>>
>>I think you would use it such:
>>
>>acl USERARP arp arp1 arp2
>>acl USERSRC src src1 src2
>>http_access allow USERARP USERSRC
>>
>>Since ACL entries are or'd and ACCESS is AND'd.
>>
>>    
>>
>
>I already do this, but this implies that a valid ip and mac in the two acls 
>can connect, while I need to check if a couple ip and mac (not any 
>combination of them) can connect.
>
>Luca
>
>  
>


      reply	other threads:[~2005-04-21  7:19 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-04-20 16:43 squid acls Luca Ferrari
2005-04-20 19:25 ` Richard Nairn
2005-04-21  7:11   ` Luca Ferrari
2005-04-21  7:19     ` Adrian C. [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=42675415.5050604@gmail.com \
    --to=drupix@gmail.com \
    --cc=fluca1978@infinito.it \
    --cc=linux-admin@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).