Necessito de ajuda squid autenticado não bloqueia nada!

rafaelpedago
(usa Debian)

Enviado em 26/09/2013 - 12:41h

Boa Tarde pessoal! sempre venho acompanhando o trabalho de todos aqui e tenho de dizer primeiramente que esse é o site mais completo do assunto, bom, sem mais delongas... vamos ao assunto! ^^

estou implantando em uma empresa ok... criei um squid autenticado com as acls e talz masssss o squid pede autenticação na rede! até ai tudo bem mas ele não discrimina usuarios independente do usuário que logar (só aceita users que eu criei a partir de "htpasswd /etc/squid3/passwd nomedousuario") a internet é totalmente liberada se alguem puder me ajudar estou dependendo só disso para receber meu merecido dindin hauhauahuahuahuah abraços a todos abaixo uma copia do meu squid.conf:

##PORTA ##
http_port 3128 transparent

##TENTATIVAAA###
dns_nameservers 208.67.222.222 208.67.220.220

## ESQUEMA AUTENTICACAO ##
auth_param basic program /usr/lib/squid3/ncsa_auth /etc/squid3/passwd
auth_param basic children 5
auth_param basic realm | Grupo Calu_Alimentos
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
visible_hostname Calu Alimentos
cache_mgr rafaelpedago@hotmail.com
error_directory /usr/share/squid3/errors/Portuguese
hierarchy_stoplist cgi-bin ?
cache_mem 512 MB
maximum_object_size_in_memory 64 MB
maximum_object_size 100 MB
cache_dir ufs /var/spool/squid3 2040 16 256

refresh_pattern ^ftp: 360 20% 10080
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

access_log /var/log/squid3/access.log

acl localhost src 127.0.0.1/32
acl localnet src 192.168.0.0/24

#############################################
## PAGINA DE ERRO EM PORTUGUES
error_directory /usr/share/squid3/errors/pt-br
#############################################

#############################################
# BLOQUEIO MSN
acl libmsnmessenger url_regex -i gateway.dll
acl msn dstdomain loginnet.passport.com
acl msn1 req_mime_type -i ^application/x-msn-messenger$
acl msn2 dstdomain messenger.hotmail.com
acl msn3 dstdomain gateway.messenger.hotmail.com
# ACL BLOQUEIO MSN
http_access deny msn
http_access deny msn1
http_access deny msn2
http_access deny msn3
http_access deny libmsnmessenger
#############################################

############################################
# BLOQUEIO GOOGLE TALK GMAIL
acl url_gtalk url_regex -i “/etc/squid3/listas/url_gtalk”
http_access deny url_gtalk all
##############################################

##############################################
# LIBERANDO GTALK
#acl ip_gtalk_liberado src “/etc/squid/regras/ip_gtalk_liberado.txt”
#http_access allow ip_gtalk_liberado url_gtalk

#BLOQUEIO DE PESQUISA POR PALAVRAS
acl bloqueio_por_palavras url_regex -i “/etc/squid3/listas/palavras”
http_access deny bloqueio_por_palavras

#BLOQUEIO DE PESQUISA POR PALAVRAS
acl bloqueio_por_palavras url_regex -i “/etc/squid3/listas/palavras”
http_access deny bloqueio_por_palavras

#BLOQUEIO DE EXTENSOES VIA BROWSER

acl bloqueio_extensoes url_regex -i “/etc/squid3/listas/extensoes”
http_access deny bloqueio_extensoes
#############################################

## ESQUEMA DE CONTROLE POR GRUPOS DE USUARIOS

## Acesso total
acl acesso_livre proxy_auth “/etc/squid3/listas/usr_livre”
http_access allow acesso_livre


## Acesso restrito
acl acesso_restrito proxy_auth “/etc/squid3/listas/usr_restrito”
acl url_bloqueado url_regex -i “/etc/squid3/listas/url_bloqueado”
http_access deny url_bloqueado
http_access allow acesso_restrito !url_bloqueado


## Acesso somente a sites liberados
acl acesso_bloqueado proxy_auth “/etc/squid3/listas/usr_bloqueado”
acl url_liberado url_regex -i “/etc/squid3/listas/url_liberado”
acl url_liberado url_regex -i “/etc/squid3/listas/url_liberado”
http_access allow url_liberado
http_access deny acesso_bloqueado !url_liberado

# http_access allow acesso_livre
# http_access allow acesso_restrito
# http_access allow acesso_bloqueado

## AUTENTICACAO ##
acl usuarios proxy_auth REQUIRED

acl purge method PURGE
http_access allow purge localhost
http_access deny purge

acl Safe_ports port 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 80 # http
acl Safe_ports port 210 # wais
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 443 # https
acl Safe_ports port 488 # gss-http
acl Safe_ports port 563 # mntps
acl Safe_ports port 591 # filemaker
acl Safe_ports port 633 # cups
acl Safe_ports port 777 # multiling http
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # swat
acl Safe_ports port 1025-65535 # unregistered ports
http_access deny !Safe_ports

acl connect method CONNECT
acl ssl_ports port 443 # https
acl ssl_ports port 563 # mntps
acl ssl_ports port 873 # rsync
http_access deny connect !SSL_ports
#####################################################################

acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT


o que estou errando??? agradeço desde já!!!

rafaelpedago
(usa Debian)

Enviado em 26/09/2013 - 13:37h

ninguem??? :(