ext_file_userip_acl(8)

Usage

ext_file_userip_acl [-dh] [-f file name]

Overview

ext_file_userip_acl is an installed binary. An external helper for the Squid external acl scheme.

It works by reading a pair composed by an IP address and an username on STDIN and matching it against a configuration file.

Options

-d: Write debug info to stderr.

-f file: Configuration file to load.

-h: Display the binary help and command line syntax info using stderr.

Configuration

The squid.conf configuration for the external ACL should be:

external_acl_type type-name %SRC %LOGIN /path/to/ext_file_userip_acl -f /path/to/config.file

If the helper program finds a matching username/ip in the configuration file, it returns OK , otherwise it returns ERR .

The configuration file format is as follows:

ip_addr[/netmask] username|@group|ALL|NONE

Where ip_addr is a dotted quad format IP address, the netmask must be in dotted quad format too.

When the second parameter is prefixed with an @ , the program will lookup the /etc/group file entry for the specified username.

There are other two directives, ALL and NONE , which mean "any user on this IP address may authenticate" or "no user on this IP address may authenticate".

Questions

Questions on the usage of this program can be sent to the Squid Users mailing list <[email protected]>

History

Arch Linux 2026-11-01: the text shown here
Debian 13 (Trixie)
Debian 12 (Bookworm)
Debian 11 (Bullseye)
Debian 10 (Buster)
Debian 9 (Stretch)