Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid Guard times of day for specific users.

    Scheduled Pinned Locked Moved pfSense Packages
    5 Posts 3 Posters 1.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nambi
      last edited by

      I want to use squid guard to block http access on off hours I have set it up and it seems to work for IP addresses.

      But for 'users' I need some extra assistance as to how to configure it.

      We are on DHCP our computers Ip changes from time to time and I need about 5 factory computers blocked but I don't know how to get 'users' to translate into computer names.

      Is this done under system/user manager? Where do I setup users and how

      Thanks

      1 Reply Last reply Reply Quote 0
      • N
        Nachtfalke
        last edited by

        Not sure if I understand you correct but you can put IP addresses into a Group ACL or you can put the computer's hostname into a Group ACL. So the IP address can change but the hostname probably will not change.

        Or dou you mean that there are different persons/employees which are working on the same computer and you want to differentiate between the user who is logged in and if this user should be allowed to use the internet or not ? I think this is not possible with squidguard at the moment. Perhaps dansguardian can help you with that problem.

        1 Reply Last reply Reply Quote 0
        • N
          nambi
          last edited by

          This is what I was hoping for but I still don't' follow

          proxy filter /groups acl

          then under the group I created there is one area

          "Client (source)" here is where i entered in my ip address and the system was correctly blocking, now the problem is I would like t use hostnames / computer names if I tested with my own computer / host name instead of the ip address the blocking is not workign correctly therefore I'm confused as to where i can set this up.  Am I putting this in the right spot?

          Thanks

          1 Reply Last reply Reply Quote 0
          • N
            Nachtfalke
            last edited by

            @nambi:

            This is what I was hoping for but I still don't' follow

            proxy filter /groups acl

            then under the group I created there is one area

            "Client (source)" here is where i entered in my ip address and the system was correctly blocking, now the problem is I would like t use hostnames / computer names if I tested with my own computer / host name instead of the ip address the blocking is not workign correctly therefore I'm confused as to where i can set this up.  Am I putting this in the right spot?

            Thanks

            Yes, as far as I know this is the correct place (I am just using IP addresses with static DHCP leases).
            Did you only try with the hostname or with domain name, too ?

            Try with
            MYCOMPUTER
            and
            MYCOMPUTER.DOMAIN

            And perhaps try to set a DNS server in squid to the correct DNS server which should know the names of the hosts.
            And enable the "Register DHCP leases in DNS forwarder" in DNS Forwarder.

            1 Reply Last reply Reply Quote 0
            • T
              TsyMiroro
              last edited by

              You can fix the IP with dhcp options (service /dhcp/mac adress)

              After create an acl under squidguard, and configure it to allow/deny.
              ACL can be an IP or a range of IP

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.