Re: [squid-users] Explicitly use direct client IP in acl

2020-07-10 Thread Amos Jeffries
On 11/07/20 4:44 am, Orion Poplawski wrote: > > IIUIC - this mainly gives me: > > http_access deny !localnet !authenticated_users > http_access allow CONNECT Allowed_SSL_Hosts > http_access allow !localnet Allowed_HTTP_Hosts > http_access deny all > > But this will only allow connections to the

Re: [squid-users] Explicitly use direct client IP in acl

2020-07-10 Thread Orion Poplawski
On 7/9/20 10:47 PM, Amos Jeffries wrote: > On 10/07/20 2:10 pm, Orion Poplawski wrote: >> On 7/9/20 6:50 PM, Amos Jeffries wrote: >>> On 10/07/20 9:54 am, Orion Poplawski wrote: Hello -    We're using a setup like this: client -> e2guardian -> squid -> internet e2

Re: [squid-users] Explicitly use direct client IP in acl

2020-07-09 Thread Amos Jeffries
On 10/07/20 2:10 pm, Orion Poplawski wrote: > On 7/9/20 6:50 PM, Amos Jeffries wrote: >> On 10/07/20 9:54 am, Orion Poplawski wrote: >>> Hello - >>> >>>    We're using a setup like this: >>> >>> client -> e2guardian -> squid -> internet >>> >>> e2guardian is providing filtering and SSL inspection. 

Re: [squid-users] Explicitly use direct client IP in acl

2020-07-09 Thread Orion Poplawski
On 7/9/20 6:50 PM, Amos Jeffries wrote: On 10/07/20 9:54 am, Orion Poplawski wrote: Hello -   We're using a setup like this: client -> e2guardian -> squid -> internet e2guardian is providing filtering and SSL inspection.  Currently we only allow access to e2guardian from our internal network

Re: [squid-users] Explicitly use direct client IP in acl

2020-07-09 Thread Amos Jeffries
On 10/07/20 9:54 am, Orion Poplawski wrote: > Hello - > >   We're using a setup like this: > > client -> e2guardian -> squid -> internet > > e2guardian is providing filtering and SSL inspection.  Currently we only > allow access to e2guardian from our internal network.  Currently we > enforce ac

[squid-users] Explicitly use direct client IP in acl

2020-07-09 Thread Orion Poplawski
Hello - We're using a setup like this: client -> e2guardian -> squid -> internet e2guardian is providing filtering and SSL inspection. Currently we only allow access to e2guardian from our internal network. Currently we enforce access to squid come from localhost, except for some specific