lrafael
(usa Outra)
Enviado em 18/08/2010 - 14:04h
Oi Gente, sou iniciante no linux, mas lido com informatica faz tempo
trabalho nun telecentro e minha distro eh uma METASYS...
Usamos no servidor o Metasys Corporate, com Squid e Dansguardian, até aí tudo bem, mas eu queria criar uma regra no meu squid para bloquear as urls com uma lista de palavras, e tive lendo que via ACL da certo, mas até agora nao consegui (pelo Dans da mta mão de obra).
Criei um arquivo "proibido" no diretorio do squid...(com algumas palavras que eu quero bloquear), e tentei criar essa regra no squid.conf
acl proibido url_regex -i "/etc/squid/proibido"
http_access deny proibido
Isso antes http_access deny all, como tenho lido, mas nao ta funcionando... to colando aqui meu squid.conf
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
#------------------------------------------------------------
# DO NOT MODIFY THIS FILE! It is updated automatically by the
# March Networks server software. Instead, modify the source
# template in the /etc/e-smith/templates directory. For more
# information, see
http://www.e-smith.org/.
#
# copyright (C) 2001 Mitel Networks Corporation
#------------------------------------------------------------
auth_param basic program /etc/squid/pam_auth
auth_param basic children 5
auth_param basic realm Metasys Proxy Server - Digite Nome e Senha Para Acesso
auth_param basic credentialsttl 2 hours
acl domainusers proxy_auth REQUIRED
http_access allow domainusers
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localsrc src 127.0.0.1 192.168.0.0/255.255.255.0
acl localdst dst 127.0.0.1 192.168.0.0/255.255.255.0
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535 980
acl CONNECT method CONNECT
acl webdav method PROPFIND TRACE PURGE PROPPATCH MKCOL COPY MOVE LOCK UNLOCK
cache_mgr admin@telecentro.net
ftp_user nobody@telecentro.net
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_dir ufs /var/spool/squid 100 16 256
cache_store_log none
logfile_rotate 2
coredump_dir none
http_access allow manager
http_access allow localdst
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl nome_acl dstdomain http://tlserver/repository
acl autolog_acl dstdomain http://tlserver/autolog
acl repository_acl dstdomain http://tlserver/repository
always_direct allow nome_acl
always_direct allow autolog_acl
always_direct allow repository_acl
http_access deny all
icp_access allow all
miss_access allow all
store_avg_object_size 3 KB
always_direct allow webdav
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Alquem ajuda? rs
obrigado