SQUID BLOQUEANDO INDEVIDAMEMTE

1. SQUID BLOQUEANDO INDEVIDAMEMTE

ejuniorr
(usa Debian)

Enviado em 04/12/2007 - 12:12h

Olá.. Minhas ACL's vinham funcionando perfeitamento porém de um tempo para cá.. o squid está bloqueando vários sites de conteúdo legal indevidamente. Oque pode estar ocorrendo? abaixo vai squid.conf :

http_port 3128
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 16 MB
maximum_object_size_in_memory 64 KB
maximum_object_size 200 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 2000 16 256
cache_access_log /var/log/squid/access.log
visible_hostname LAB
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280
auth_param basic program /usr/lib/squid/pam_auth

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 192.168.50.0/255.255.255.255
acl autenticacao proxy_auth REQUIRED

acl SSL_ports port 443 563 8443
acl Safe_ports port 80
acl Safe_ports port 82
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT

acl usuariosProibidos proxy_auth "/etc/squid/usuarios_proibidos"
acl usuariosPermitidos proxy_auth "/etc/squid/usuarios_permitidos"
acl naoLiberados proxy_auth "/etc/squid/nao_liberados"
acl sitesPermitidos url_regex -i "/etc/squid/sites_permitidos"
acl sitesProibidos url_regex -i "/etc/squid/sites_proibidos"
acl sitesProibidos2 url_regex -i "/etc/squid/sites_proibidos2"
acl macBlock arp "/etc/squid/mac"
acl horario time MTWHF 18:30-22:30
acl msn_application req_mime_type -i ^application/ x-msn-messenger$
acl msn_gateway url_regex -i gateway.dll

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow sitesPermitidos
http_access allow usuariosPermitidos
http_access deny macBlock horario
http_access deny sitesProibidos
http_access deny naoLiberados sitesProibidos2
http_access deny usuariosProibidos
http_access deny msn_application
http_access deny msn_gateway

http_access allow autenticacao

icp_access allow all

0 0

Quote

2. Re: SQUID BLOQUEANDO INDEVIDAMEMTE

m4tri_x
(usa Ubuntu)

Enviado em 04/12/2007 - 16:36h

http_access allow localhost
http_access allow sitesPermitidos
http_access allow usuariosPermitidos

coloca logo no inicio das regras...
acho que vai funcionar :D

[]´s

0 0

Quote