Solved

Allow specific hosts/IPs to bypass Squid authentication

Posted on 2009-05-12
3
3,437 Views
Last Modified: 2013-11-22
Is it possible to have an entry in the Squid.conf that would allow a specific host/IP to bypass NTLM authentication?

Currently all users surf the web an authenticate via NTLM to the Active Directory.  My problem is that I have a copier that we'd like setup for scan-to-email using an external SMTP server but the copier doesn't allow proxy configurations.
0
Comment
Question by:leadwave
3 Comments
 
LVL 13

Accepted Solution

by:
WizRd-Linux earned 500 total points
ID: 24371517
Add the site to a file called /etc/squid/whitelist

In the squid.conf file add the following:

acl whitelist dstdomain "/etc/squid/whitelist"
http_access allow whitelist

Make sure the http_access is before your ntlm authentication line.  Restart squid and you should be good.
0
 

Author Comment

by:leadwave
ID: 24373421
Thanks, I'll give that a try.
0
 
LVL 1

Expert Comment

by:joobz
ID: 25323595
leadwave, Another alternative is to just bypass Squid all together for this particular host.

Presuming you are routing the traffic to Squid via IPTables Prerouting - before your Prerouting rule that does the Squid redirect, just add something like..

> iptables -t nat -I PREROUTING -i eth0 -s <printer_ip> -p tcp --dport 25 -j ACCEPT

Benefit of this is it will keep the load away from Squid (though minor, it's not necessary for it to hit Squid).
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
IPA client Config problems 2 167
Best method to remove 360 Safety Guard from Windows 8 4 258
Viruses etc. and W8 and W10 12 75
ransomware virus 21 105
UPDATE - 6/15/2011 Added support for Release Update 6 Maintenance Patch 2 Point Patch 1 (RU6 MP2 PP1). Fixed a defect in the username field that was hard-coded to look for a specific domain (left over code from testing). This release will be the …
Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now