Squid3 allowed IPs instead the complete subnet?

[slu]

Hi,

is there a way to allow only single IPs instead of the complete subnets?
Only a few clients should have access to the internet.

At the moment, without squid, I use firewall rules with aliases to allow the clients.

slu

[kesawi]

You can create a set of custom ACLs to control which clients can access the internet through squid. You need to create the following in the Custom ACLS (Before Auth) box under Advanced features in the squid proxy configuration:

## Allow internet access for specific LAN clients
acl internet_access_allowed src <ips and="" ip="" ranges="" to="" allow="" internet="" access="" for="">
http_access allow internet_access_allowed

## Allow access for pfSense firewall
http_access allow localhost

##Block internet access for all other LAN traffic
http_access deny all</ips>

You may still need to use firewall rules for SSL traffic.