From be5caa55ecbd82248d73825eec00062d58daef95 Mon Sep 17 00:00:00 2001 From: hno <> Date: Thu, 13 Jun 2002 23:04:18 +0000 Subject: [PATCH] Documented the max_user_ip -s option for strict mode --- src/cf.data.pre | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/src/cf.data.pre b/src/cf.data.pre index 01b7121fb4..6ff105d1aa 100644 --- a/src/cf.data.pre +++ b/src/cf.data.pre @@ -1,6 +1,6 @@ # -# $Id: cf.data.pre,v 1.260 2002/05/03 14:25:29 hno Exp $ +# $Id: cf.data.pre,v 1.261 2002/06/13 17:04:18 hno Exp $ # # # SQUID Web Proxy Cache http://www.squid-cache.org/ @@ -1942,14 +1942,18 @@ DOC_START # This will be matched when the client's IP address has # more than HTTP connections established. - acl aclname max_user_ip + acl aclname max_user_ip [-s] number # This will be matched when the user attempts to log in from more # than different ip address's. The authenticate_ip_ttl # parameter controls the timeout on the ip entries. - # NOTE: in acceleration mode, clients may appear to come from - # multiple address's if they are going through proxy farms, - # so a limit of 1 may cause user problems. - + # If -s is specified then the limit is strict, denying browsing + # from any further IP addresses until the ttl has expired. Without + # -s Squid will just annoy the user by "randomly" deny requests. + # (the counter is then reset each time the limit is reached and a + # request is denied) + # NOTE: in acceleration mode or where there is mesh of child proxies, + # clients may appear to come from multiple address's if they are + # going through proxy farms, so a limit of 1 may cause user problems. acl aclname req_mime_type mime-type1 ... # regex match agains the mime type of the request generated -- 2.47.3