SQUID PROBLEMA !!! [RESOLVIDO]

liviomm
(usa Debian)

Enviado em 07/04/2010 - 22:46h

Seguinte estou querendo bloquear somente as palavras no meu squid so que nao sei o que pode estar errado esta bloqueando tudo eu tenho que ficar liberando os sites. Queria liberar toda rede e bloquear o que esta no item proibido aonde estou errado... !

Squid COnf abaixo.

Galera

Bom estou tentando confgiurar meu squid para ter acesso total a internet menos o que esta no proibido.txt so que ao inves disto esta bloqueando tudo nao sei o que pode ser. segue abaixo meu squid.conf.

Vlw Galera

SQUID.CONF
__________

## SQUID3 PROXY SERVER ##

## Nome do Servidor
visible_hostname Linux - Servidor Proxy

## PORTA SQUID
http_port 3128 transparent
icp_port 3130
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
mime_table /etc/squid/mime.conf

## CACHE
cache_mem 96 MB
maximum_object_size_in_memory 128 KB
maximum_object_size 512 MB
maximum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

## PERMITIDO
acl permitido url_regex -i "/etc/squid/permitido.txt"

## PROIBIDO
acl proibido url_regex -i "/etc/squid/proibido.txt"

# ACL`S
#acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl redelocal src 192.168.151.0/255.255.255.0
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

## ALLOW / DENY
http_access allow redelocal
http_access allow permitido
http_access allow manager localhost
http_access allow localhost
http_access deny all
icp_access allow all
http_reply_access allow all
http_access deny proibido
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
coredump_dir /var/spool/squid
##########################################
## SQUID3 PROXY FIM
##########################################

leandrobrunoo
(usa Ubuntu)

Enviado em 07/04/2010 - 23:09h

amigo, segue abaixo o conf, em pleno funcionamento,
depois te testa a respota e so marca o topico como resolvido.
lembrando, depois de mudar o seu conf, por esse aqui e so da um
root#/etc/init.d/squid restart

http_port 3128 transparent
# Host visíl
visible_hostname Servidor_bjcia

# Email do administrador
cache_mgr leandrobruno@msn.com

# Apresentar erro em portugues
error_directory /usr/share/squid/errors/Portuguese

cache_mem 100 MB
maximum_object_size_in_memory 1024 KB
maximum_object_size 512 MB
minimum_object_size 0 KB
cache_swap_low 95
cache_swap_high 98
cache_dir ufs /var/spool/squid 3000 16 256
cache_access_log /var/log/squid/access.log
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

# Lista de extensao bloqueadas para download (.avi .exe .wmv)
acl download url_regex -i "/etc/squid/download"
http_access deny download

acl palavrasproibidas dstdom_regex "/etc/squid/palavrasproibidas"
http_access deny palavrasproibidas

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 1025-65535
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

#muda de acordo com sua rede
acl redelocal src 10.0.0.0/24
http_access allow localhost
http_access allow redelocal
http_access deny all