Complete Transparent SQUID Linux Firewall Configuration
Complete Transparent SQUID Linux Firewall Configuration
-
nwclasantha
- Posts: 75
- Joined: Wed Apr 24, 2013 12:57 am
- Location: Malabe
-
nwclasantha
- Posts: 75
- Joined: Wed Apr 24, 2013 12:57 am
- Location: Malabe
Re: Complete Transparent SQUID Linux Firewall Configuration
NOTE:
You have to copy paste the entire acl-final.txt file in squid.conf. Best is to paste at end of file.
?? ????????? "acl-final.txt" ????? ????? ?????? ?????? "squid.conf" ????? ????? ????? ??????? ???? ?????? ????? ..! ?? ????? ?????? ???????? ????? ??? ???? ?? ???????? ????? ?? ???? ????? ?? .
???? ????? :
DHCP Server ??? ???? ??????? ?? ????????? ????? ??? ???? ????? ?? ?????? ????? ?????? ??? ??? ????? ..! ????? .???? ?????? ?????? / ???????? ?????? ??? ?????? ????? ??????? ?? ?????? ?? ????? ???? ..???? DHCP Server ????? ?? ???? ?? ??????? ??????? ?????? " acl-final.txt" ???? ?? ?????? ???? ??-???????? ?? ???? ??? ??? ??????? .!
1. edit your squid.conf. Add these acl..
acl mac1 arp 00:14:85:99:3B:8D
acl ip1 arp 192.168.0.1
2. Add this before "http_access deny all"
http_access allow mac1 ip1
using this way you bind mac with one IP address that user can’t change his machine address
to bypass squid filters.
NOTE: Squid can only determine the MAC address for clients that are on the same subnet.
If the client is on a different subnet, then Squid cannot find out its MAC address.
Sample:-
acl our_network src 192.168.0.0/24
http_access allow our_network
acl mac1 arp 00:14:85:99:3B:8D
acl ip1 arp 192.168.0.1
http_access allow mac1 ip1
http_access deny all
You have to copy paste the entire acl-final.txt file in squid.conf. Best is to paste at end of file.
?? ????????? "acl-final.txt" ????? ????? ?????? ?????? "squid.conf" ????? ????? ????? ??????? ???? ?????? ????? ..! ?? ????? ?????? ???????? ????? ??? ???? ?? ???????? ????? ?? ???? ????? ?? .
???? ????? :
DHCP Server ??? ???? ??????? ?? ????????? ????? ??? ???? ????? ?? ?????? ????? ?????? ??? ??? ????? ..! ????? .???? ?????? ?????? / ???????? ?????? ??? ?????? ????? ??????? ?? ?????? ?? ????? ???? ..???? DHCP Server ????? ?? ???? ?? ??????? ??????? ?????? " acl-final.txt" ???? ?? ?????? ???? ??-???????? ?? ???? ??? ??? ??????? .!
1. edit your squid.conf. Add these acl..
acl mac1 arp 00:14:85:99:3B:8D
acl ip1 arp 192.168.0.1
2. Add this before "http_access deny all"
http_access allow mac1 ip1
using this way you bind mac with one IP address that user can’t change his machine address
to bypass squid filters.
NOTE: Squid can only determine the MAC address for clients that are on the same subnet.
If the client is on a different subnet, then Squid cannot find out its MAC address.
Sample:-
acl our_network src 192.168.0.0/24
http_access allow our_network
acl mac1 arp 00:14:85:99:3B:8D
acl ip1 arp 192.168.0.1
http_access allow mac1 ip1
http_access deny all
-
nwclasantha
- Posts: 75
- Joined: Wed Apr 24, 2013 12:57 am
- Location: Malabe
Re: Complete Transparent SQUID Linux Firewall Configuration
nwclasantha wrote: Complete Transparent SQUID Linux Firewall Configuration