squid 限制内网用户只能登陆，不能上传

原创

fccwcom 2013-01-14 11:03:34 博主文章分类：任务计划 ©著作权

文章标签 squid 文章分类 Hive 大数据

©著作权归作者所有：来自51CTO博客作者fccwcom的原创作品，请联系作者获取转载授权，否则将追究法律责任

操作没有成功，能查询，但还是不能登陆！

有点网站，登陆与上传的都是 method="post"动作

http_access allow local_rd_network rd_allow_url

http_access allow local_rd_network rd_post_url

http_access allow local_rd_network rd_get_url Get

http_access allow local_rd_network allowfile

如何限制？

网友摘录：

============================>

近日，小弟将公司squid2.7升级到了3.1，但是不知如何实现“部分上传大小限制”！

尝试过用request_body_max_size 30 KB，但是很遗憾这是一个全局变量，无法做例外，一但加到squid.conf里面所有IP都无法上传30KB以上的文件。

坛子里高手如云，有哪位大虾在“squid3.0+”中做过限制部分IP上传大小的，可否指点一二？

还是把方案贴出来吧，给大伙参考下下！

acl my_net 10.0.0.0/32

acl UPLIMIT req_header Content-Length [5-9][0-9]{5} [0-9]{7,}

acl UPLOAD method post ftp

http_access deny my_net UPLIMIT UPLOAD

Re: [squid-users] How to limit upload for a particular source ip/user?

From: Abu Khaled <khaled.abu@dont-contact.us>
Date: Sat, 20 Aug 2005 09:39:39 +0300

On 8/20/05, Senthil Murugan <zenmurugan@gmail.com> wrote:
> Thanks for your prompt response. I should have asked you clearly. I was
> thought of limiting the file size of the upload. I think using delay pools
> we can limit the bandwidth for a particular user.... I thought of using the
> "request_body_max_size" to control the upload size, but it is a general
> configuration parameter which is applicable for all the users.
>
> Syntax:
> # TAG: request_body_max_size (KB)
>
> But for limiting download size i think we can use "reply_body_max_size"
> with acl capabilities
>
> # TAG: reply_body_max_size bytes allow|deny acl acl...
>
> I like to know if there is any way in which we can control the upload size
> for a particular user
>
> -SenthilMurugan
>
>
> >> How to limit the upload for a particular user/source ip?
> >>
> >AFAIK squid delay pools only affect incomming traffic (download) and
> >have no effect on the outgoing traffic (upload).
> >
> >Regards.
> >Abu Khaled
>
>

Seems like I did not cc the list on my first reply !!!
Here is how I was able to block uploads larger than 500KB:

acl my_net src 10.0.0.1/255.255.255.0
acl USERA src 10.0.0.1/255.255.255.255
acl UPLIMIT req_header Content-Length [5-9][0-9]{5,}
acl UPMETH method post
http_access deny USERA UPMETH UPLIMIT
http_access allow my_net
http_access deny_all

PS: Though I was able to block the uploads the traffic still hits
squid (eq: 2MB) before it displays the deny page