Exchange Locaweb X Squid

ricardomurer
(usa Outra)

Enviado em 19/09/2013 - 11:05h

Bom dia pessoal, estou com um problema serio aqui na empresa onde trabalho, recentemente migramos nossos e-mails para o serviço exchange da locaweb, porem quando os usuarios acessam depois de alguns segundos aleatórios a sessão cai voltando a tela de login, ja vi alguns lugares pra configurar acesso direto sem proxy para o endereço criando uma acl mais nao estou conseguindo, se alguem puder analisar deixo abaixo o arquivo de configuração do squid, com a acl acesso_sem_usuario

Agradeço a atenção !!! Obrigado!!

#Recommended minimum configuration:

#acl all src 0.0.0.0/0.0.0.0

#acl manager proto cache_object

#acl localhost src 127.0.0.1/255.255.255.255

#acl to_localhost dst 127.0.0.0/8



acl manager proto cache_object

acl localhost src 127.0.0.1/32 ::1

acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1



cache_access_log /var/log/squid/access.log

visible_hostname mail.dide.com.br



acl SSL_ports port 443

acl Safe_ports port 80          # http

acl Safe_ports port 21          # ftp

acl Safe_ports port 443         # https

acl Safe_ports port 70          # gopher

acl Safe_ports port 210         # wais

acl Safe_ports port 1025-65535  # unregistered ports

acl Safe_ports port 280         # http-mgmt

acl Safe_ports port 488         # gss-http

acl Safe_ports port 591         # filemaker

acl Safe_ports port 777         # multiling http

acl Safe_ports port 5001        # cameras Hugo Pedroso

acl Safe_ports port 86

acl Safe_ports port 21

acl Safe_ports port 8886        #Unimed



acl CONNECT method CONNECT



#cache_access_log /var/log/squid/access.log

#cache_replacement_policy heap GDSF

#cache_dir ufs /var/spool/squid 700 32 256

#cache_log none

#cache_store_log none

auth_param basic program /usr/lib/squid/pam_auth

auth_param basic realm Acesso Restrito e Monitorado

acl password proxy_auth REQUIRED

acl Safe_ports port 80



#acl libera_msn                  url_regex -i           "/etc/squid/rules/msn.txt"

acl ips_liberados                proxy_auth             "/etc/squid/rules/ips_liberados.txt"

acl super_usuarios               proxy_auth             "/etc/squid/rules/super_usuarios.txt"

acl usuarios_monitorados         proxy_auth             "/etc/squid/rules/usuarios_monitorados.txt"

acl usuarios_gerenciados         proxy_auth             "/etc/squid/rules/usuarios_gerenciados.txt"

acl usuarios_sem_acesso          proxy_auth             "/etc/squid/rules/usuarios_sem_acesso.txt"



acl extensoes    urlpath_regex -i       "/etc/squid/rules/extensoes_bloqueadas.txt"





acl sites_acesso_direto         url_regex -i    "/etc/squid/rules/sites_acesso_direto.txt"

acl sites_permitidos            url_regex -i    "/etc/squid/rules/sites_permitidos.txt"

acl acesso_bloqueado            url_regex -i    "/etc/squid/rules/sites_acesso_bloqueado.txt"

acl acesso_sem_usuario          dstdomain -i    "/etc/squid/rules/acesso_sem_usuario.txt"



http_access     allow all    ips_liberados

http_access     allow        password super_usuarios

http_access     allow all    sites_acesso_direto

http_access     deny         extensoes

http_access     deny         acesso_bloqueado

http_access     deny         usuarios_semacesso

http_access     allow        password usuarios_monitorados

http_access     allow        password usuarios_gerenciados sites_permitidos

always_direct   allow all    acesso_sem_usuario



# Only allow cachemgr access from localhost

http_access allow manager localhost

http_access deny manager



# Deny requests to unknown ports

http_access deny !Safe_ports



# Deny CONNECT to other than SSL ports

http_access deny CONNECT !SSL_ports



# And finally deny all other access to this proxy

http_access allow localhost

http_access deny all



#Default:

http_reply_access allow all



#Allow ICP queries from everyone

icp_access allow all



# Squid normally listens to port 3128

http_port 3128



#We recommend you to use at least the following line.

hierarchy_stoplist cgi-bin ?





access_log /var/log/squid/access.log squid