Níveis de bloqueio Squid por ip

igorcruz
(usa Outra)

Enviado em 07/08/2011 - 20:41h

Boa noite a todos .
To com uma duvida espero que alguem do vol posso me ajudar.
Tenho um Squid rodando normal,so esta sendo usando para bloquear alguns site(orkut,facebook,youtube).Mas agora eu preciso colocar 3 computadores com acesso totalmente liberados e mantem o restante bloqueado.
Exemplo:acesso a todos os sites-192.168.20.20-192.168.20.21-192.168.20.22
Acesso bloqueado a alguns sites-192.168.20.30,31,32,33,34,35

Segue meu arquivo squid.conf

http_port 3128
visible_hostname localhost.localdomain
error_directory /usr/share/squid/errors/pt-br

cache_mem 64 MB
maximum_object_size_in_memory 128 KB
maximum_object_size 1100 MB
cache_dir ufs /var/spool/squid 2048 16 256

refresh_pattern ^ftp: 360 20% 10080
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log

acl localhost src 127.0.0.1/32
acl localnet src 192.168.20.0/24

acl manager proto cache_object
http_access allow manager localhost
http_access deny manager

acl purge method PURGE
http_access allow purge localhost
http_access deny purge

acl Safe_ports port 3128
acl Safe_ports port 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 80 # http
acl Safe_ports port 210 # wais
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 443 # https
acl Safe_ports port 488 # gss-http
acl Safe_ports port 563 # nntps
acl Safe_ports port 591 # filemaker
acl Safe_ports port 631 # cups
acl Safe_ports port 777 # multiling http
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # swat
acl Safe_ports port 1025-65535 # unregistered ports
http_access deny !Safe_ports

acl connect method CONNECT
acl SSL_ports port 443 # https
acl SSL_ports port 563 # nntps
acl SSL_ports port 873 # rsync
http_access deny connect !SSL_ports

acl domains dstdomain "/etc/squid/bloqueados"
http_access deny domains

acl extensions urlpath_regex -i "/etc/squid/extensions"
http_access deny extensions

acl redelocal src 192.168.20.0/24
http_access allow localhost
http_access allow redelocal
http_access deny all