Ajuda - Proxy Transparente

TioRoni
(usa Debian)

Enviado em 25/02/2013 - 16:12h

route add default gw 200.271.99.27



echo "1" > /proc/sys/net/ipv4/ip_forward



# Limpando as tabelas

iptables -F

iptables -t nat -F

iptables -t mangle -F



# Mascarando conexoes da rede

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE



iptables -t nat -A PREROUTING -i eth2 -p tcp --dport 80 -j REDIRECT --to-port 3128



iptables -t nat -A PREROUTING -d 200.271.99.28 -p tcp --dport 3389 -j DNAT --to 192.168.1.233:3389



 

## ÚLTIMA ATUALIZAÇÃO DO ARQUIVO ====> 20/02/2013



http_port 3128 intercept

visible_hostname MASTERX



cache_mem 512 MB

maximum_object_size_in_memory 4 MB

maximum_object_size 102400 kb

minimum_object_size 0 kb

cache_swap_low 80

cache_swap_high 85





half_closed_clients off

memory_replacement_policy heap GDSF

cache_replacement_policy heap LFUDA



cache_dir aufs /var/spool/squid3/squid_1 512 16 256

cache_dir aufs /var/spool/squid3/squid_2 512 16 256

cache_dir aufs /var/spool/squid3/squid_3 512 16 256

cache_dir aufs /var/spool/squid3/squid_4 512 16 256

cache_dir aufs /var/spool/squid3/squid_5 512 16 256



#### Resolve problema com conexoes persistentes que ocorre com certos servidores,

#### e que provoca delays em nosso cache

detect_broken_pconn on





####Provoca um ganho de performance ao usar conexões pipeline (Requições em paralelo)

pipeline_prefetch on





################################## Autenticação #####################################

#auth_param basic program /usr/lib/squid3/ncsa_auth /etc/squid3/squid_passwd

#auth_param basic children 10

#auth_param basic realm Autentique-se para usar a Internet - MASTERX

#auth_param basic credentialsttl 4 hours

#auth_param basic casesensitive off



########################### Controles de Acesso (ACL) ###############################



acl all src

acl localhost src 127.0.0.1/32

acl redelocal src 192.168.1.0/32

acl SSL_ports port 443 563

acl Safe_ports port 80 21 22 443 563 280 488 591 777 1025-65535

purge method PURGE

acl CONNECT method CONNECT



########################### Meus Controles de Acesso ################################



#acl usuarios proxy_auth REQUIRED

acl sitesbloqueados url_regex -i "/etc/squid3/sitesbloqueados"

acl palavrasbloqueadas dstdom_regex -i "/etc/squid3/palavrasbloqueadas"

acl palavrasliberadas dstdom_regex -i "/etc/squid3/palavrasliberadas"

acl sitesliberados url_regex -i "/etc/squid3/sitesliberados"

acl streaming rep_mime_type ^video/x-ms-asf

acl radiosonline urlpath_regex -i "/etc/squid3/radiosonline"

acl chefes src 192.168.1.253 192.168.1.26



################################## HTTP_ACCESS ######################################



http_access allow chefes

http_access allow palavrasliberadas

http_access allow sitesliberados

http_access deny sitesbloqueados

http_access deny palavrasbloqueadas

http_access deny radiosonline

http_reply_access deny radiosonline

http_access deny streaming

http_reply_access deny streaming

#http_access allow usuarios



http_access deny purge

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports



http_access allow localhost

http_access deny all



# acl matutino time 08:00-12:00

# acl vespertino time 14:00 - 18:00



# http_access deny !matutino !vespertino





#delay_pools 1

#delay_pools 1 2

#delay_parameters 1 16384/16384 16384/16384

# acl rede local src 10.0.0.0/25

#delay_access 1 allow redelocal



############################## Configurações Gerais ##################################



dns_nameservers 8.8.8.8 8.8.4.4



error_directory /usr/share/squid3/errors/pt-br



access_log /var/log/squid3/access.log squid



cache_mgr roni@masterx.com.br

 

danniel-lara
(usa Fedora)

Enviado em 25/02/2013 - 16:34h

http_port 3128 transparent 

TioRoni
(usa Debian)

Enviado em 25/02/2013 - 16:38h

http_port 3128 transparent 

djosino
(usa Ubuntu)

Enviado em 25/02/2013 - 16:39h

TioRoni
(usa Debian)

Enviado em 25/02/2013 - 16:44h