Buƙaci duka shiga Squid da madaidaicin IP na abokin ciniki
Iyakance mai amfani da Squid mai suna zuwa wani adireshin tushe da aka amince, ta hanyar buƙatar duka sharuɗɗan ACL.
Kalmar sirri daidai rabi ne kawai na wannan manufar: asusun ya kamata ya yi aiki daga wani adireshin abokin ciniki da aka amince da shi kuma. A Squid, sanya duka gwaje-gwajen a kan ƙa'idar shiga ɗaya shine bambanci tsakanin wannan buƙatar da hanyoyi biyu daban.
Idan an riga an saita tabbatarwa, kamar saitin Squid 6.13 NCSA, ainihin manufar ita ce:
acl approved_login proxy_auth alex
acl approved_source src 192.0.2.40/32
http_access allow approved_source approved_login
http_access deny all
Yi amfani da tushen da Squid ke samu a zahiri; misalin adireshin takardu ne. Riƙe kariyar da ta gabata don tashoshin da ba su da aminci, sabis na gida da zirga-zirgar CONNECT. Wannan ɓangaren yana nuna haɗaɗɗiyar sharar, ba cikakken saitin mai sauraro ba.
Duba ƙa'idodin da ke sama
Izini mai faɗi na baya zai iya karɓar buƙatar kafin ta isa sabuwar sharar. Bayanin http_access yana bayyana daidaitawa cikin tsari. Karanta cikakken jeri, gami da fayilolin da aka haɗa.
Izini ɗaya don sunan mai amfani da wani don tushen ba sa buƙatar duka biyu. Kowace layi za ta iya yin nasara da kanta. Wannan wata manufa ce daban.
ACL proxy_auth ya dogara da mataimakin tabbatarwa. Ayyana shi ba shine yadda ake ƙirƙirar mai amfani ko tabbatar da kalmar sirri ba. Wannan misali na proxy bayyananne ne wanda abokan cinikinsa za su iya amsa ƙalubalen tabbatarwar proxy.
Asalin tushe yana da iyaka kuma. Mutane bayan NAT ɗaya na iya raba adireshi, kuma kwamfutar tafi-da-gidanka mai motsi na iya canza adireshi. Ƙarin sharar yana rage wurin cibiyar sadarwar da ake amfani da asusun; ba ya gane kwamfuta ta zahiri da tabbaci. Tabbatar wannan iyakar ta dace da dalilin da ya sa ka ƙara sharar tun farko.