squid.conf bloqueia todas paginas

porfavor amigos, alguem ja viu isso!
qualquer regra de squid que boto bloqueia todos os site!

so libera quando comento todas as linhas que contem "deny".
mas ai as regras não funcionam!

alguem ja viu isso ?

Posta seu squid.conf...

http_port 3128

cache_mem 100 MB

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

cache_swap_low 90
cache_swap_high 95

#tamanho máximo para gravação no cache Squid
maximum_object_size 100 MB

#tamanho mínimo para gravação no cache Squid
minimum_object_size 1 MB

# Tamanho máximo dos objetos mantidos em memória.
maximum_object_size_in_memory 900 kb

cache_dir ufs /var/spool/squid 2048 16 256
coredump_dir /var/spool/squid

pid_filename /var/run/squid.pid
error_directory /usr/share/squid/errors/English
visible_hostname ilv.net
cache_mgr areadeti.lauravicunha@hotmail.com

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

dns_nameservers 8.8.8.8
dns_nameservers 8.8.4.4

acl localnet src 192.168.0.1/24

acl SSL_ports port 443
acl Safe_ports port 80 8080 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

### livres
acl site url_regex -i "/etc/squid/livres.txt"

Só adiciona no final:

http_access deny localnet !site

 

So vai permitir o que estiver dentro de sites (um por linha) ex:

uol.com.br

itau.com.br

terra.com.br