Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

maybe open discussions or so for help with configurations? #921

Open
f1-outsourcing opened this issue May 1, 2023 · 3 comments
Open

maybe open discussions or so for help with configurations? #921

f1-outsourcing opened this issue May 1, 2023 · 3 comments

Comments

@f1-outsourcing
Copy link

Can't get this to work, still getting annoying popups of firefox about telemetry/portal access urls from z.z.z.z I also do not really get how to re-write this.

flush
users $/etc/3proxy/3proxy.users
auth iponly strong
deny * * 127.0.0.1
allow * z.z.z.z www.website.com 80,443
allow * x.x.x.x,y.y.y.y sa-update.* 80,443
allow user1 u.u.u.u,t.t.t.t database.clamav.net 443
allow user1 w.w.w.w database.clamav.net 443
deny *
proxy -p8888

#908

@z3APA3A
Copy link
Collaborator

z3APA3A commented May 3, 2023

"allow user1" requires authentication.

@f1-outsourcing
Copy link
Author

f1-outsourcing commented May 3, 2023

O

"allow user1" requires authentication.

only for ip addresses u.u.u.u,t.t.t.t and w.w.w.w not for z.z.z.z

also tried this

allow * z.z.z.z www.website.com 80,443
allow * x.x.x.x,y.y.y.y sa-update.* 80,443
deny * 
allow user1 u.u.u.u,t.t.t.t database.clamav.net 443
allow user1 w.w.w.w database.clamav.net 443

@z3APA3A
Copy link
Collaborator

z3APA3A commented May 5, 2023

Currently, authentication is checked prior to the ACL rule where username is used, so any rule with username specified triggers authentication. Probably, it's not hard to change it to check itin the case the rest of ACL matches.

allow * z.z.z.z www.website.com 80,443
allow * x.x.x.x,y.y.y.y sa-update.* 80,443
deny * 
allow user1 u.u.u.u,t.t.t.t database.clamav.net 443
allow user1 w.w.w.w database.clamav.net 443

should workaround authentication request, but these rules

allow user1 u.u.u.u,t.t.t.t database.clamav.net 443
allow user1 w.w.w.w database.clamav.net 443

are never reached.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants