Squid mit benutzername

auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of=DOMAIN+InternetAccess
auth_param ntlm children 48
auth_param ntlm keep_alive on
auth_param basic program  /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of=DOMAIN+InternetAccess
auth_param basic children 48
auth_param basic realm FIRMA Internetzugang - Berechtigungspruefung
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
#external_acl_type nt_group ttl=0 concurrency=5 %LOGIN /usr/lib/squid/wbinfo_group.pl
url_rewrite_program /usr/bin/squidGuard -c /etc/squid/squidGuard2.conf
acl password proxy_auth REQUIRED
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl SSL_ports port 443          # https
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 8080
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl lan src 192.168.0.0/24
acl vpn src 10.1.251.0/24
acl wlan src 10.0.1.0/24
acl appsrv src 192.168.0.8/32
acl secnet dst 10.1.3.0/24
acl innendienst src 192.168.0.15/32
acl msn1 req_mime_type -i ^application/x-msn-messenger$
acl msn2 rep_mime_type -i ^application/x-msn-messenger$
acl generali dstdomain .generali.de
http_access deny msn1
http_access deny msn2
#never_direct allow all
http_access allow generali all
#http_access allow appsrv
http_access allow password
http_access allow localhost
http_access deny all
icp_access allow localnet
icp_access deny all
http_port 3128
#cache_peer     localhost       parent  8080    0       default
hierarchy_stoplist cgi-bin ?
cache_mem 1024 MB
cache_dir diskd /var/spool/squid 8192 64 256
access_log /var/log/squid/access.log squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern (Release|Package(.gz)*)$        0       20%     2880
refresh_pattern .               0       20%     4320
acl shoutcast rep_header X-HTTP09-First-Line ^ICY\s[0-9]
upgrade_http0.9 deny shoutcast
via on
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
cache_mgr webmaster
error_directory /usr/share/squid/errors/German
forwarded_for on

dbhome /var/lib/squidguard/db
logdir /var/log/squid

src server {
        ip      192.168.0.8
}

src minimal {
        user    azubi1
}

src innendienst {
        user    mitarbeiter3
}

src allowwebmail {
        user    mitarbeiter1 mitarbeiter2
}
src chef {
        user    chef1 chef2
}
dest standard {
        domainlist      standard/domains
}
dest gesellschaften {
        domainlist      gesellschaften/domains
}
dest auskunft {
        domainlist      auskunft/domains
}
dest webmail {
        domainlist      webmail/domains
        urllist         webmail/urls
}

dest downloads {
        domainlist      downloads/domains
        urllist         downloads/urls
}

dest warez {
        domainlist      warez/domains
        urllist         warez/urls
}

dest socialnet {
        domainlist      socialnet/domains
        urllist         socialnet/urls
}


acl {
        server {
                pass auskunft gesellschaften standard none
        }
        allowwebmail {
                pass !socialnet webmail any
        }
        innendienst {
                pass !webmail !downloads !warez !socialnet any
        }
        chef {
                pass any
        }
        minimal {
                pass auskunft gesellschaften standard none
        }
        default {
        pass !webmail !downloads !warez any
        redirect        http://proxy.firma.local/block.php?username=%i&ip=%a&URI=%u&src=%s&dst=%t&pc=%n
}
}