April 25, 2009

Mac Address based filtering in Squid


Q. I'm using squid proxy server under Rhel5. How to filter a particular MAC address under squid?

A. Not all operating system supports Mac address based filtering. For some operating systems. Squid calls these "ARP ACLs" and they are supported on Linux, Solaris, and BSD variants.

How do I set up ACL's based on MAC address?

Open squid.conf:

# vi /etc/squid/squid.conf

Local acl, section and append ACL as follows:
acl macf1 arp mac-address
acl macf2 arp 00:11:22:33:44:55
http_access allow macf1
http_access allow macf2
http_access deny all

Save and close the file.

Restart squid server:

# service squid restart

No comments:

Post a Comment