Restricting internet access with there IP addresses in squid

[moqthiyar]

Sir I am using squid as my proxy server I have given the “http access to allow all” entry in squid.conf file. And they are using it with proxy servers IP address and port number.
I want to restrict internet for some computers with there IP address.
Can you tell me how to configure it in squid.conf?

[Ricky]

first of all .u should have not used the allow all because then any one even from internet can access your proxy. ..
So first see that your squid.conf should look like this.
Squid Proxy configuration then to disallow some ips. then simply make an acl..
say you want to block 192.168.4.4 then

Code: [Select]

acl bad_ips src 192.168.4.4
http_access deny bad_ipshere bad_ips is a name for acl i have used.. u can use any thing ...
BTW.. ur type of questions has been already answered.. try to search the few threads related to squid..

[dragoncity99]

Ricky, why not teach him to block a eth MAC address, this will permanently block the PC he wishes.

[moqthiyar]

Thanks for your replay I am trying to setup with MAC addresses
But when I tried this
%  ./configure –enable-arp-acl…

It says “bash: fg: %: no such job”
I saw it in a squid documentation there it say if src/acl.c doesn’t compile, then ARP ACLs are probably not supported on your system.

[dragoncity99]

SO, did u start arp's service? Or have it installed?

[Ricky]

moqthiyar> do you know wht does they mean by compiling it with arp-acl it means you have to again recompile the squid.
I think you are using ".. " don't use them.
only use.. ./configure --enable-arp-acl --enable-linux-netfilter --enable-snmp --enable-delay-pools  and all the options u want.  

If that don't work then simply you can use iptables to block the users.