Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Bob on April 13, 2002, 07:33:11 AM

Title: SquidGuard and IP Security Controls
Post by: Bob on April 13, 2002, 07:33:11 AM

I recently installed the SquidGuard add-on for a few of the SME 5.12 servers that I support.  When you access the Content Filtering link in the Server Manager there is an IP Security Controls section.

What is the proper way to add a range of IP address's to the Restricted List.  Can you do this

192.168.1.21-192.168.1.254

OR can you just do this

192.168.1.21-254

Once the range is entered in, where is it stored on the hard drive?

Thanks in advance for any help.

Title: Re: SquidGuard and IP Security Controls
Post by: Johan on April 14, 2002, 02:59:03 PM

Hello Bob,

Just read in de manual on the site off SquidGuard (www.SquidGuard .org)


IP addresses and/or ranges (multiple):
ip xxx.xxx.xxx.xxx [...]
or
ip xxx.xxx.xxx.xxx/nn [...]
or
ip xxx.xxx.xxx.xxx/mmm.mmm.mmm.mmm [...]
or
ip xxx.xxx.xxx.xxx-yyy.yyy.yyy.yyy [...]
where:
xxx.xxx.xxx.xxx is an IP address (host or net, i.e. 10.11.12.13 or 10.11.12.0),
/nn a net prefix (i.e. /23),
mmm.mmm.mmm.mmm is a netmask (i.e. 255.255.254.0) and
yyy.yyy.yyy.yyy is a host address (must be >= xxx.xxx.xxx.xxx)


IP address/range list (single):
iplist filename
where:
filename is either a path relative to dbhome or an absolute path (i.e. /full/path) to a database file.
the iplist file format is simply addresses and/or networks separated by a newline as above but without the ip keyword. Thus an iplist for all the private addresses could look something like (Though the preferred use of "iplist" over "ip" is for long lists of WS/PC addresses primarily to reduce the size of the configuration file):
10.0.0.0/8
172.16.0.0/12
192.168.0.0/16

Grtz

Johan