<![CDATA[Squid - allowed subnets]]>I am trying to setup pfsense with squid, but I want to grant access to the proxy to specific ip addresses. So I uncheck "allow users on interface" and under "access control" I enter for example "10.1.2.56/32" in the "allowed subnets"-box. This doesn't work: the client receives an access denied message. I then looked at the squid.conf file (/usr/local/etc/squid/squid.conf) and noticed that the required acl line is created (acl allowed_subnets src 10.1.2.56/32) but there's no matching http_access line. When I add the line manually and restart the squid service, it seems to work…. is this a known problem?

]]>https://forum.netgate.com/topic/23480/squid-allowed-subnetsRSS for NodeThu, 05 Mar 2026 08:08:12 GMTTue, 11 May 2010 14:48:09 GMT60<![CDATA[Reply to Squid - allowed subnets on Wed, 12 May 2010 14:20:55 GMT]]>That seems to do the trick, thanks! (don't know why I didn't see that myself, duh)

]]>https://forum.netgate.com/post/232463https://forum.netgate.com/post/232463Wed, 12 May 2010 14:20:55 GMT<![CDATA[Reply to Squid - allowed subnets on Wed, 12 May 2010 15:06:09 GMT]]>Use 'Unrestricted IPs' field for allow single ip addresses.

]]>https://forum.netgate.com/post/232459https://forum.netgate.com/post/232459Wed, 12 May 2010 15:06:09 GMT<![CDATA[Reply to Squid - allowed subnets on Wed, 12 May 2010 13:51:05 GMT]]>Any other ideas?

]]>https://forum.netgate.com/post/232456https://forum.netgate.com/post/232456Wed, 12 May 2010 13:51:05 GMT<![CDATA[Reply to Squid - allowed subnets on Tue, 11 May 2010 14:57:26 GMT]]>That's a quick reply - thanks!

But it didn't help… I've been trying to get it to work for a few hours now, toggling and saving exactly as you say, but the http_access line just isn't there. I googled the problem and indeed found some old things, but thought it would be solved after so many years... :(

I also know about the file being overwritten at reboot. It was just a way to try if that was the problem...

]]>https://forum.netgate.com/post/232367https://forum.netgate.com/post/232367Tue, 11 May 2010 14:57:26 GMT<![CDATA[Reply to Squid - allowed subnets on Tue, 11 May 2010 14:53:33 GMT]]>Also, keep in mind that squid.conf is generated by /usr/local/pkg/squid.inc at boot.  If you want to manually edit your squid.conf - do it here.

]]>https://forum.netgate.com/post/232365https://forum.netgate.com/post/232365Tue, 11 May 2010 14:53:33 GMT<![CDATA[Reply to Squid - allowed subnets on Tue, 11 May 2010 14:51:48 GMT]]>Try toggling the allow users on interface, hit save, turn it off, hit save again.  There have been some issues with the squid.conf interaction with that option in the past.

]]>https://forum.netgate.com/post/232364https://forum.netgate.com/post/232364Tue, 11 May 2010 14:51:48 GMT