Software :: SQUID - Connection Limit Per User Not Per IP Address
Mar 9, 2010
I running Squid 2.7. I using NCSA veryfication so only registered users may use proxy server. I want to allow only 1 connection to proxy for 1 user. Why not per ip ? Alot of users have dynamic IP's and i want to avoid password sharing beetween users. Any idea how to do it in squid ? Mb other autentyfication system connected to squid granting access to proxy server ?
Is it possible to limit each user so that only one can connect via each username for ssh/sftp? I work with a small company where there aren't really enough of us to justify using a revision control system, but we don't want to accidentally step on each other's toes, so we'd like to try simply preventing more than one person from accessing a given domain at once.
recently i rent a xen vps intended to setup a PPTPD vpn server for me and my friends. so we can by-pass the great firewall in china and get back on ....., facebook and stuff. i have already setup the server and i can connect to it without any problem. but i still want to do some further configuration the server:
1. i want to limit the bandwidth to 400k/s per connection. 2. i also want to limit the max connection per user a/c
i have some thoughts on the 2nd requirement. in the user configuration file of /etc/ppp/chap-secret, you can specify the range of ip the user can get, does it limit the max connection per user a/c? or they can connect anyway, just every now and then a box pop up says conflict in IP address?
I have a VPS server with 512 MB memory. The php.ini is set so script memory limit = 16 MB. However, I have noticed in my top report, instances like the following:
The bold number of 6.4 is the % of sever memory this process is using. 6.4 % of 512 MB of memory is about 32 MB of memory, so it appears that this isn't being limited by php.ini. Am I correct? This leads to the next question: Is there some way to limit the amount of memory a single suphp process can use? (Basically, something like the setting in php.ini which limits suphp processes in the same way.)
i have centos os squid 2.6 version,i have to configured squid to restrict some ip to 10 kb upload for that i set request_max_body_max_size but this directive is applicable to all ips but i want to limit uploading for some paricular ips.
Is there any way of limiting total download from a particular ip in a month with the help of squid proxy. Through delay pool I beleive we can limit the download speed.But I want total download limit for particular ip or user
I m using squid 2.7 Stable 9 and Dansguardian 2.10.1.1, i have compiled both squid and dansguardian, i have enabled follow_x_forwarded_for in squid to make clients IPs visible to squid, i have also set x_forwarded_for=on in dansguardian, this is working fine and clients ips are visible to squid. Now i want to set down-loadable file size limit upto 50 MB in squid by using the acl reply_body_max_size 52428800 allow mynetwork for every user except few users the above acl is not working properly. mynetwork is our private network which is 192.168.0.0/16.
When i set the acl reply_body_max_size 52428800 allow localhost . it works fine but only for localhost. I want to allow upto 50 MB down-loadable file size to every user in my network except a few users whom will have access upto 500 MB down-loadable file size.
I want to limit bandwidth for downloading files with squid. I want to reserve bandwidth for other traffic (esp. web browsing). I know about delay pools but I don't understand well. Some users use download managers to download large movie files. I don't want to block downloading but I want to give them limited bandwidth. May be 5KBps or 6KBps because I have only 512Kbps (64KBps) connection.
How to set download limit using SQUID? I want to specify the download limit for a particular list in MB. Is it possible to limit bandwith for some group of machines in network?
I just want to place upload/download limit to each ip address ( say 20MB per day for each ip or specific ip) using squid proxy i tried through delay pool but it control only download/upload speed not place any download/upload quota restriction. following are my codes I have 1Mbps line
delay_pools 2 delay_class 1 2 # here 700kbps(87Kbytes) Net-Total usage limit, with 50Kbytes per user
[code]...
I also used
"reply_body_max_size" parameter to control upload limit.
But
"request_body_max_size" only restrict download based on size.
how to setup quota ( download quota per day per ip)
I have a few multi-user servers in an academic laboratory. I am having a problem with some users maxing out the available RAM, causing such sever slowdowns the machine essentially crashes. My servers are Dell Power Edge's running Ubuntu 8.10 Server Edition (Not my choice). I would like to set a maximum limit on the amount of ram a user can utilize. This morning I experimented with setting limits via /etc/security/limits.conf and using ulimit. Neither of them prevented my test program, a simple infinite loop of mallocs, from crashing the server.
Im trying to limit the diskspace users on the system may consume, and i found quotas (im a total linux noob). But when i try to set it, no matter what i set it to the maximus is 2 GB. Now... i need quite a lot more than that. One user should be able to use 1900 GB and the other 600 GB. How can i fix this? Im using ubuntu server 10.04.
How to set download limit using SQUID? I want to specify the download limit for a particular list in MB. Is it possible to limit bandwith for some group of machines in network?
I've been looking for this feature for months and couldn't find a solution for this. Does anyone know how to create users and limit the user to a specified directory?
i configured Squid3 server in my Ubuntu 10.04.Now the ip based and content based blocking is working fine.Now i want to configured bandwidth allocation of ip address and group ip address..pls give the solution
but it give me error as like: - (This is the output of # squid -k parse) aclParseAclLine: Invalid ACL type 'arp' FATAL: Bungled squid.conf line 1234: acl block arp 00:13:45:d3: 24:e4 squid Cache (Version 2.5.STABLE6) : Terminated abnormally
I need to block mac address in my network then i foolowed as below acl's but am getting output as follows I tried as in /etc/squid/squid.conf acl block arp aa:aa:yy:yy:xx:xx http_access deny block but it give me error as like: - (This is the output of # squid -k parse) aclParseAclLine: Invalid ACL type 'arp' FATAL: Bungled squid.conf line 1234: acl block arp aa:aa:yy:yy:xx:xx squid Cache (Version 2.5.STABLE6): Terminated abnormally.
Is there any way to limit user name to characters so when I create an account and if the account name is more than 8 characters long, it will not allow.
I need to create two Access Control Lists for my networks using SQUID proxy. The ip address range from 165.165.42.10 to 165.165.42.50 for one network and from 165.165.42.60 to 165.165.42.90 for another network. How can I make it?
I'm trying the tail -f 172.16.X.XX /var/log/squid/access.log to view the sites requested by the client ip 172.16.X.XX but the result is it still open all the ip's requesting for the internet access. is there any tail commands that can monitor only the specific IP address requesting for internet access.
I have got squid 3.0 stable 13 installed on a new centos5 box .I have used it on other centos5 ones and it has worked really well.It didnt give any error messages during installation on this one until i used the proxies in the browser.I have used it on other centos5 ones and it has worked really well.But with this box I am getting this error in browser-The following error was encountered while trying to retrieve the URL:Yahoo!Socket FailureThe system returned: (99) Cannot assign requested addressSquid is unable to create a TCP socket, presumably due to excessive load. Please retry your request.I have tried many options for http_port but to no avail.I have never seen this error before with and am totally clueless
I have some domains on a VPS server. Typical account memory usage for all domains runs at 50% of available, but I have a problem. One domain is causing me trouble because intermittently traffic will spike on that domain, causing so many requests within 1 min that I exceed my memory allocation for my entire VPS package. Apache is then killed but the virtualization software and Apache must then be restarted.
A sample snippet from tops right before the sever went down would like like this:
All of that memory usage adds up. I would like to "throttle" the number of processes that user/domain can run. I think this would be a quick and easy way to keep the domain from taking down my entire VPS. My understanding is that I could do this with the /etc/security/limits.conf file.
Is that correct?
I have never done this before. Do I want to set a hard or soft limit? I think if I wanted to limit the number of processes for "coldclim" to 15 I would add a line to limits.conf like this:
Code:
Assuming that is correct, can anyone tell me how the website would respond once it reached its limit? Would visitor queries become sluggish, or would the website not come up for them at all?
I need your help for a problem that it's happening in my customer. What I need is to change the configuration of a proxy, configured on Linux Cent OS v 4.3( explanation - see below) .My squid configuration's file it's like this:
We have set up a connection in OpenOffice Base to MtSql on a remote server - a very nifty thing.
We have OpenVpn set up - also works very good, in Yast - Security and users - allowed services - External Zone we have Mysql added so we can connect no problem.
My Question is : we can connnect using OpenVpn - through 10.x.x.x. but also via the normal address , 193.x.x.x.
How can I limit this, so people can only connect via the OpenVpn connection?
The clients are all OpenSuse 11.2, the remote server is OpenSuse 11.1.
Me and my friend are using the same internet, sometimes he downloads something or watches a movie online. When he does that my internet connection becomes very weak. So is there any way to put limit on his computer? Like only 30kb/s
i have a linux server which users connect to with SSH. my users only upload and download content from their /home folder.
Basicly, I want them to be limited to see and use only their home folder.
I read that it might not be a good idea to do so, since they nead read premissions to run programs and scripts, but again: they are only downloadinguploading content to their home dir.