Mark Robinson wrote:

MMV> I have another question, I want to allow some people to connect to MMV> Internet using Squid as a Proxy Server (without using the FireWall MMV> inside the kernel),

Without using the firewall? I'm not quite sure what you mean...

Ok, I mean that I want them to access to the Internet Web services throught a Web Proxy (squid) to accelerate the average dowload time and not use ip masquerading (or NAT) at least to browse the web.

MMV> but I want to do this dinamically, i.e. I want to MMV> write some kind of script that writes an ACL for an specific range of IP MMV> addresses but not for the rest, what do you think?

Does this range of IP addresses change? If not you can just set up an ACL. If it does change - what causes it to change?

Ok, I've the following scenario. I have three classroom and each classroom has a static IP range. Something like: Classroom1: 192.168.1.1 - 19 Classroom2: 192.168.1.20 - 39 Classroom3: 192.168.1.40 - 59 The teachers want to be able to allow/deny the Internet access to a classroom independently of the other ones. I want to write a simple script that changes the ACL of the squid.conf and then maybe reinicialize the service or send a kill -HUP signal... I don't know yet. I'm using Webmin to let them administrate the Internet connection, Manage users and so on, so they would execute the script from Webmin.

Mark mailto:mcr@reason-technology.com

Thanks for your atention, Manuel Martínez Valls