Hi all,
I've to configure Squid2 in order to ask for a password if a user go
to an external address
and no password have to be asked if the destination address is internal

I've this rules:

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8

http_access allow manager localhost
http_access deny manager

acl mynetwork src a.b.c.d/x
acl to_mynetwork dst a.b.c.d/x

external_acl_type NT_global_group %LOGIN c:/squid/libexec/win32_check_group.exe
acl users1 external NT_global_group Users
acl password proxy_auth REQUIRED

http_access allow to_mynetwork users1
http_access allow password users1
http_access allow mynetwork
http_access deny all

but in this way squid require a password also if the dst address is in
my network,
what's the correct way to perform this task?

Reply via email to