Configure Squid Proxy Server Mac Address Based Filtering - TecAdmin https://tecadmin.net/configure-squid-proxy-server-mac-address-based-filt...

El servidor proxy es
rechazando las
conexiones
Written by Rahul, Updated on June 4, 2019
Firefox está configurado para usar un s
proxy que está rechazando las conexion
mac, mac filtering, proxy, squid, squid as mac filter

Compruebe la configuración de pr

El servidor proxy está rechazando las conexiones

asegurarse de que es correcta.
Contacte con su administrador de
asegurarse de que el servidor prox

Firefox está configurado para usar un servidor proxy que está rechazando las conexiones.

MAC-based filtering is useful for networks using

DHCP to assign IP addresses to systems. As we
know MAC is hard coded on NIC and can’t be
changed but IP addresses assigned by DHCP
may change on next IP assignment. This tutorial
will help you to how to Configure Squid Proxy
Server Mac Address Based Filtering.
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we
will assume that you are happy with it.

Ok No

1 de 9 12/06/2020 16:10
Configure Squid Proxy Server Mac Address Based Filtering - TecAdmin https://tecadmin.net/configure-squid-proxy-server-mac-address-based-filt...

Install and Configure SQUID Proxy Server on

CentOS/RHEL Linux

ACL rules are need to add in squid configuration

file /etc/squid/squid.conf. Remember that squid
Squid always applied first matching rules from
top to down order and ignore other after
matching any rule

1. Block All Sites For Single MAC El servidor proxy es

Address
rechazando las
Following configuration will block all the sites to conexiones
the system having MAC address
01:23:45:AB:CD:EF. Firefox está configurado para usar un
servidor proxy que está rechazando las

Squid ACL Rule: conexiones.

Compruebe la configuración de pr
para asegurarse de que es correcta
acl pcmac1 arp 01:23:45:AB:CD:EF
Contacte con su administrador de
http_access deny pcmac1 para asegurarse de que el servidor
está funcionando.

2. Block Single Site for Single MAC Reintent

Address
Following configuration will block
www.example.com site to the system having
MAC address 01:23:45:AB:CD:EF.

Squid ACL Rule:

We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we
will assume that you are happy with it.

Ok No

2 de 9 12/06/2020 16:10
Configure Squid Proxy Server Mac Address Based Filtering - TecAdmin https://tecadmin.net/configure-squid-proxy-server-mac-address-based-filt...

http_access deny blocksite1 pcmac1

3. Block All Sites for Multiple MAC

Addresses
Following configuration will block all the sites to
systems having MAC addresses
01:23:45:AB:CD:EF and AB:CD:EF:01:23:45.

MAC Addresses List

$ cat /etc/squid/mac-addrs.lst

01:23:45:AB:CD:EF
AB:CD:EF:01:23:45

Squid ACL Rule:

acl pcmacs arp "/etc/squid/mac-addrs.lst"

http_access deny pcmacs

4. Block Single Site for Multiple

MAC Addresses
Following configuration will block
www.example.com to systems having MAC
addresses 01:23:45:AB:CD:EF and
AB:CD:EF:01:23:45.

We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we
will assume that you are happy with it.

Ok No

3 de 9 12/06/2020 16:10
Configure Squid Proxy Server Mac Address Based Filtering - TecAdmin https://tecadmin.net/configure-squid-proxy-server-mac-address-based-filt...

01:23:45:AB:CD:EF
AB:CD:EF:01:23:45

Squid ACL Rule:

acl blocksite1 dstdomain www.example.com

acl pcmacs arp "/etc/squid/mac-addrs.lst"
http_access deny blocksite1 pcmacs

5. Allow Specific Site for Single

MAC Address
Following configuration will allow
www.example.com to system having MAC
address 01:23:45:AB:CD:EF and deny other
sites.
Squid ACL Rule:

acl pcmac1 arp 01:23:45:AB:CD:EF

acl allowsite1 dstdomain www.example.in
http_access allow allowsite1 pcmac1
http_access deny pcmac1

6. Allow Multiple Sites for Single

MAC Address
Following configuration will allow all sites added
in /etc/squid/allowsites.lst to a system having
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we
will assume that you are happy with it.

Ok No

4 de 9 12/06/2020 16:10
Configure Squid Proxy Server Mac Address Based Filtering - TecAdmin https://tecadmin.net/configure-squid-proxy-server-mac-address-based-filt...

Allowed Sites List

$ cat /etc/squid/allowsites.lst

www.google.co.in
yahoo.com
in.yahoo.com

Squid ACL Rule:

acl pcmac1 arp 01:23:45:AB:CD:EF

acl allowsite1 dstdomain "/etc/squid/allowsites.lst"
http_access allow allowsite1 pcmac1
http_access deny pcmac1

7. Allow Specific Site for Multiple

MAC Addresses
Following configuration will allow
www.example.com to systems having MAC
address 01:23:45:AB:CD:EF and
AB:CD:EF:01:23:45 and deny other sites.

MAC Addresses List

$ cat /etc/squid/mac-addrs.lst

01:23:45:AB:CD:EF
AB:CD:EF:01:23:45

Squid
We use cookiesACL Rule:
to ensure that we give you the best experience on our website. If you continue to use this site we
will assume that you are happy with it.

Ok No

5 de 9 12/06/2020 16:10
Configure Squid Proxy Server Mac Address Based Filtering - TecAdmin https://tecadmin.net/configure-squid-proxy-server-mac-address-based-filt...

acl pcmacs arp "/etc/squid/mac-addrs.lst"

http_access allow blocksite1 pcmacs
http_access deny pcmacs

8. Allow Multiple Sites for Multiple

MAC Addresses
Following configuration will allow all the sites
listed in /etc/squid/allowsites.lst to all systems
having MAC address listed in /etc/squid/mac-
addrs.lst and deny other sites.

MAC Addresses List

$ cat /etc/squid/mac-addrs.lst

01:23:45:AB:CD:EF
AB:CD:EF:01:23:45

Allowed Sites List

$ cat /etc/squid/allowsites.lst

www.google.co.in
yahoo.com
in.yahoo.com

Squid ACL Rule:

acl pcmacs arp "/etc/squid/mac-addrs.lst"

acl allowsites dstdomain "/etc/squid/allowsites.lst"
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we
will assume that you are happy with it.

Ok No

6 de 9 12/06/2020 16:10
Configure Squid Proxy Server Mac Address Based Filtering - TecAdmin https://tecadmin.net/configure-squid-proxy-server-mac-address-based-filt...

SHARE IT!

I, Rahul Kumar am the founder and

chief editor of TecAdmin.net. I am a Red
Hat Certified Engineer (RHCE) and
working as an IT professional since
2009..

September 11, 2019

September 7, 2019

November 20, 2018

October 21, 2018

We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we
will assume that you are happy with it.

Ok No

7 de 9 12/06/2020 16:10
Configure Squid Proxy Server Mac Address Based Filtering - TecAdmin https://tecadmin.net/configure-squid-proxy-server-mac-address-based-filt...

December 17, 2019 at 12:46 am

iptables=/sbin/iptables-legacy

acertablet=”01:db:c9:db:00:00″

$iptables -A FORWARD -m mac –mac-source

$acertablet -j DROP

September 11, 2017 at 5:45 pm

I followed this tutorial it work like a charm to block all
http websites based on mac address. but as one user
said it bypass all the https traffic. i found this tutorial
to block https traffic in squid: http://broexperts.com
/block-facebook-twitter-and-youtubes-https-traffic-in-
squid-transparent-mode/

July 12, 2017 at 6:10 am

mac based filter can be bypassed using https in the
address bar. . is thier any fix on this??

August 21, 2014 at 1:24 pm

mac based filter can be bypassed using https in the
address bar. . is thier any fix on this??

thanks in advance!

We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we
will assume that you are happy with it.

Ok No

8 de 9 12/06/2020 16:10
Configure Squid Proxy Server Mac Address Based Filtering - TecAdmin https://tecadmin.net/configure-squid-proxy-server-mac-address-based-filt...

Thanks in advance

COMMENTS *

http_access allow pcmac1

NAME * http_accessEMAIL
deny all
* WEBSITE

SAVE MY NAME, EMAIL, AND WEBSITE IN THIS BROWSER FOR

THE NEXT TIME I COMMENT.

Copyright © 2013-2020 TecAdmin.net. All Rights Reserved. This site uses cookies. By using this website you
agree with our term and services

We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we
will assume that you are happy with it.

Ok No

9 de 9 12/06/2020 16:10