Hi 

We've got problems with proxy_auth..
We're trying to limit ftp access. First we've defined a acl for the ftp
protocol(ftpget) and a user-list (ftp_drop).
The ftp_drop user-list contains one line (t820423). This user exists
also in the default list all_pass. If we try to access a ftp-site it
blocks it successfully. Now we change the entry in the ftp_drop file to
something else.
But squid still denies the ftp-requests...
Any help greatly appreciated.
by the way.. whats the difference between the acl type proxy_auth and
ident?

Cheers

Pascal


Here are the config and the debug output from the cache.log

squid.conf:

authenticate_program /opt/squid/bin/ncsa_auth /opt/squid/etc/dump
acl all_pass proxy_auth REQUIRED
acl ftp_drop proxy_auth "/opt/squid/etc/test"
acl ftpget proto FTP
http_access deny ftpget ftp_drop
http_access allow all_pass

cache.log:
1999/03/10 17:46:41| aclCheck: checking 'http_access deny ftpget
ftp_drop'
1999/03/10 17:46:41| aclMatchAclList: checking ftpget
1999/03/10 17:46:41| aclMatchAcl: checking 'acl ftpget proto FTP'
1999/03/10 17:46:41| aclMatchAclList: checking ftp_drop
1999/03/10 17:46:41| aclMatchAcl: checking 'acl ftp_drop proxy_auth
"/opt/squid/etc/test"'
1999/03/10 17:46:41| aclMatchProxyAuth: checking user 't820423'
1999/03/10 17:46:41| aclMatchProxyAuth: user 't820423' validated OK
1999/03/10 17:46:41| aclMatchAclList: returning 1
begin:vcard 
n:Tscharner;Pascal
x-mozilla-html:FALSE
org:UBS
adr:;;;Zurich;;;Switzerland
version:2.1
email;internet:[EMAIL PROTECTED]
x-mozilla-cpt:;0
tel;work:+4112367522
fn:Pascal Tscharner
end:vcard

Reply via email to