Defining traffic from a particular machine as a group

[Jennifer Heise]

​Help!
I'm pretty sure we can do this, but I'm trying to figure out *how* to do
it.
I need to restrict access to a resource through EZproxy to only 1-2 IP
addresses. I think we do that with groups, and if so, how do I define the
group? Or is there another way to do ​this?

[Julien Savoie]

[Ammon, Shawn W.]

I think what you really want to do is autologin. Read the manual here:

http://oclc.org/support/services/ezproxy/documentation/cfg/autologinip.en.html


Create an autologin stanza for the resource you want to proxy by ip's and then undo it with an exclude IP statement immediately afterward.


Shawn Ammon


________________________________
From: Julien Savoie <***@usainteanne.ca>
Sent: Monday, October 13, 2014 9:01 PM
To: EZProxy discussion list
Subject: Re: [ezproxy] Defining traffic from a particular machine as a group

On 13/10/14 03:46 PM, Jennifer Heise wrote:

I'm pretty sure we can do this, but I'm trying to figure out *how* to do it.
I need to restrict access to a resource through EZproxy to only 1-2 IP addresses. I think we do that with groups, and if so, how do I define the group? Or is there another way to do ?this?

You might be better off spawning an entirely different ezproxy instance and have it listen to a different series of ports. Given you want to restrict by IP address rather than user, you can use iptables (or whatever firewall) to limit traffic to those second series of ports so that only those 1-2 IP addresses can reach them.



You are currently subscribed to ezproxy as: ***@creighton.edu.
To unsubscribe, send request to ***@itec.suny.edu

---
You are currently subscribed to ezproxy as: gee-***@m.gmane.org.
To unsubscribe, send request to ***@itec.suny.edu

[Wimmer Christian]

Use a Group statement in your config.txt like this:

Group Selective

T Beck-Online
U http://beck-online.beck.de
D beck-online.beck.de

Group Default

You need to assign something to this group in your user.txt, for example:

:LDAP


IfIp 11.111.111.11; Group +Selective


/LDAP

Group statements are a bit tricky. Take care that it affects ALL databases after a group statement, therefore you need to either change the group back tot he standard default group or put this special database at the end of your configuration. Use the user.txt test-tool in your admin interface. The OCLC ezproxy documentation has a lot more info on that subject.
--
Christian Wimmer

Ludwig-Maximilians-UniversitÀt MÌnchen
UniversitÀtsbibliothek
Abteilung Informationstechnologie
Teamleitung Infrastruktur

Geschwister-Scholl-Platz 1, 80359 MÃŒnchen
Tel.: [phone]
E-Mail: ***@ub.uni-muenchen.de<mailto:***@ub.uni-muenchen.de>




Von: Jennifer Heise [mailto:***@drew.edu]
Gesendet: Montag, 13. Oktober 2014 20:47
An: EZProxy discussion list
Betreff: [ezproxy] Defining traffic from a particular machine as a group


​Help!
I'm pretty sure we can do this, but I'm trying to figure out *how* to do it.
I need to restrict access to a resource through EZproxy to only 1-2 IP addresses. I think we do that with groups, and if so, how do I define the group? Or is there another way to do ​this?
--
Jennifer Heise, ***@drew.edu<mailto:***@drew.edu>
Reference/Web Manager, Drew University Library
973-408-3675
"Comments are free, but facts are on expenses." -- Tom Stoppard

You are currently subscribed to ezproxy as: ***@ub.uni-muenchen.de<mailto:***@ub.uni-muenchen.de>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>

---
You are currently subscribed to ezproxy as: gee-***@m.gmane.org.
To unsubscribe, send request to ***@itec.suny.edu