ahfaris
asked on
online disconnect for authenticated user
I have linux box used as proxy server ,, i am using squid 2.5 with ntlm_auth ,, i am using squish script to deny users who exceed their traffic quota ,, this script see who exceed his quota and append his username to a text file ,, every user exist in this file is denied ,, but the following case is still has problem :
for example a user is downloading a file its size 900MB ,, and the quota is 100MB ,, the user will be denied after he finished his download and will not be disconnedted ,, but while he is downloading and after exceeds his quota he will be denied from opening any new page or make new download ,, i want to disconnect him directly after he reach his limit , can any one help
for example a user is downloading a file its size 900MB ,, and the quota is 100MB ,, the user will be denied after he finished his download and will not be disconnedted ,, but while he is downloading and after exceeds his quota he will be denied from opening any new page or make new download ,, i want to disconnect him directly after he reach his limit , can any one help
ASKER
I think there is away to stop user untill renew his quota limit ,, any one has another opinion ?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Once a connection is established the default rule would be to not check again untill the next connection attempt.
What you want is a mid-connection quota check based on some timeout rule or other known quantity.
However, based on my (brief) re-reading of the documentation of squid, and squidguard, I don't see where this is possible.
The closest thing I came to was a "connection timeout" that wouldnt allow a connection for more than a certain time.
This would actually work, have your users use "download managers". Then limit the number of connections from each IP, then limit the duration of each connection, then the download manager would have to "resume" later when there was quota available.
Don't know if this is what you want, but it might work for you.