Re: [squid-users] http_acces list problem: list searching doesnt

--=-cYZD7YSyfXXqiEuIHs+C
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Sat, 2003-09-27 at 05:56, Horvath Katalin wrote:

> Its a Debian Woody box, with 2.4.28 kernel. I downloaded squid 2.5=20
> stable 3 source from www.squid-cache.org, "debianized" it with deb-make=20
> command. My debian/rules files is:

You could just use apt-get source to get a pre debianised sources, with
the full configure line. In fact, IIRC, the debian sources enable ntlm.

> http_access deny badusers
> http_access allow AuthorizedUsers
> http_access allow our_networks

This is your problem:
authorised users in the badusers list will be blocked.
Unauthorised users will be allowed.

I suggest:
# prevent brute force external attacks on user passwords
http_access deny !our_networks
# require authentication
http_access deny !AuthorizedUsers
# block bad users
http_access deny badusers
# allow everything else
http_access allow all

Rob
--=20
GPG key available at: <http://members.aardvark.net.au/lifeless/keys.txt>.

--=-cYZD7YSyfXXqiEuIHs+C
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQA/dg//I5+kQ8LJcoIRAnx5AJ9hj+cYbex65vjVfh0f43p1SRREbgCfaf +q
FFAcx4MAfJZ/EG5L4ZjYMNU=
=/bRp
-----END PGP SIGNATURE-----

--=-cYZD7YSyfXXqiEuIHs+C--