Squid Guard times of day for specific users.



  • I want to use squid guard to block http access on off hours I have set it up and it seems to work for IP addresses.

    But for 'users' I need some extra assistance as to how to configure it.

    We are on DHCP our computers Ip changes from time to time and I need about 5 factory computers blocked but I don't know how to get 'users' to translate into computer names.

    Is this done under system/user manager? Where do I setup users and how

    Thanks



  • Not sure if I understand you correct but you can put IP addresses into a Group ACL or you can put the computer's hostname into a Group ACL. So the IP address can change but the hostname probably will not change.

    Or dou you mean that there are different persons/employees which are working on the same computer and you want to differentiate between the user who is logged in and if this user should be allowed to use the internet or not ? I think this is not possible with squidguard at the moment. Perhaps dansguardian can help you with that problem.



  • This is what I was hoping for but I still don't' follow

    proxy filter /groups acl

    then under the group I created there is one area

    "Client (source)" here is where i entered in my ip address and the system was correctly blocking, now the problem is I would like t use hostnames / computer names if I tested with my own computer / host name instead of the ip address the blocking is not workign correctly therefore I'm confused as to where i can set this up.  Am I putting this in the right spot?

    Thanks



  • @nambi:

    This is what I was hoping for but I still don't' follow

    proxy filter /groups acl

    then under the group I created there is one area

    "Client (source)" here is where i entered in my ip address and the system was correctly blocking, now the problem is I would like t use hostnames / computer names if I tested with my own computer / host name instead of the ip address the blocking is not workign correctly therefore I'm confused as to where i can set this up.  Am I putting this in the right spot?

    Thanks

    Yes, as far as I know this is the correct place (I am just using IP addresses with static DHCP leases).
    Did you only try with the hostname or with domain name, too ?

    Try with
    MYCOMPUTER
    and
    MYCOMPUTER.DOMAIN

    And perhaps try to set a DNS server in squid to the correct DNS server which should know the names of the hosts.
    And enable the "Register DHCP leases in DNS forwarder" in DNS Forwarder.



  • You can fix the IP with dhcp options (service /dhcp/mac adress)

    After create an acl under squidguard, and configure it to allow/deny.
    ACL can be an IP or a range of IP


Locked