[clug] Enforce SSH tunnel to squid proxy

[Matthew Hawkins]

Ian Perry said:
> Can you bind squid to 127.0.0.1 instead?
> Does squid respect ets/hosts.allow and /etc/hosts.deny ?

Squid has inbuilt ACL controls also, so even if it doesn't support the TCP
wrappers you can still achieve the same thing (restricting allowed
connections to be a particular host or netblock or whatever) from inside
squid itself.
I'm curious as to the choice of ssh tunnel rather than SSL and proxy
authentication...
-- 
Matt