Ajuda com SQUID.CONF urgente [RESOLVIDO]

alecardoso
(usa Outra)

Enviado em 06/10/2017 - 08:07h

Bom dia Pessoal, sou iniciante em Linux e estou montando um proxy com autenticação para a empresa que trabalho.
Ele não obedece as regras, tem momentos que ele pede autenticação, tem momentos que não. Outro problema é que quando eu configuro o proxy no meu navegador pra fazer testes ele não deixa eu conectar na console do Webmin que é 172.16.1.111:10000.

Me ajudem , abaixo segue o meu squid.conf
O que devo estar fazendo de errado ?

Obrigado

# Recommended minimum configuration:
#

# INFORMA O CAMINHO DO PROGRAMA DE AUTENTICAÇÃO E O ARQUIVO DE LOGINS E SENHAS
auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/passwd
auth_param basic children 5
auth_param basic realm Autentique-se para acessar a Internet
auth_param basic casesensitive off

#Mostra o nome do servidor configurado nas mensagens de erro
visible_hostname localhost


#ACL Controles de Acesso
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
#acl password proxy_auth "/etc/squid/usuarios"
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7 # RFC1918 possible internal network
acl localnet src fe80::/10 # RFC 4193 local private network range
acl SSL_ports port 443 # RFC 4291 link-local (directly plugged) machines

acl Safe_ports port 80
acl Safe_ports port 21 # http
acl Safe_ports port 443 # ftp
acl Safe_ports port 210 # https
acl Safe_ports port 1025-65535 # gopher
acl Safe_ports port 280 # wais
acl Safe_ports port 488 # unregistered ports
acl Safe_ports port 591 # http-mgmt
acl Safe_ports port 777 # gss-http
acl CONNECT method CONNECT # filemaker

#
# Recommended minimum Access Permission configuration:
#
# Only allow cachemgr access from localhost


# Deny requests to certain unsafe ports
#http_access allow manager localhost

# Deny CONNECT to other than secure SSL ports
#http_access deny manager

# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#

acl sites_proibidos url_regex -i "/etc/squid/sites_proibidos"
http_access deny sites_proibidos

acl vendedores proxy_auth "/etc/squid/vendedores"
acl sites_vendedores url_regex -i "/etc/squid/sites_vendedores"
http_access allow vendedores sites_vendedores

acl usuarios_dir proxy_auth "/etc/squid/usuarios_dir"
http_access allow usuarios_dir

acl usuarios_silcar proxy_auth "/etc/squid/usuarios_silcar"
acl sites_silcar url_regex -i "/etc/squid/sites_silcar"
http_access allow usuarios_silcar

# Example rule allowing access from your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

# And finally deny all other access to this proxy
#http_access allow localnet
http_access deny all

# set visible_hostname (specify hostname)
visible_hostname localhost

# Squid normally listens to port 3128
http_port 3128

# Uncomment and adjust the following to add a disk cache directory.
cache_mem 128 MB
maximum_object_size_in_memory 64 KB
maximum_object_size 512 MB
minimum_object_size 0 KB

cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 5000 16 256
cache_access_log /var/log/squid/access.log

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid/access.log

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320