diegotesch
(usa Ubuntu)
Enviado em 12/08/2013 - 15:33h
bom apos efetuar alguns testes pude perceber o seguinte
configurei o arquivo /etc/squid/squidGuard.conf com duas acls
uma para maquinas administrativas, as quais terao acesso total a todos os sites. e uma acl padrao que recebera o bloqueio de varios sites.
meu squidGuard.conf esta da seguinte forma.
dbhome /var/lib/squidguard/db/BL
logdir /var/log/squid
dest white {
domainlist white/domains
urllist white/urls
}
dest
[*****] {
domainlist
[*****]/domains
urllist
[*****]/urls
}
dest adv {
domainlist adv/domains
urllist adv/urls
}
dest aggressive {
domainlist aggressive/domains
urllist aggressive/urls
}
dest alcohol {
domainlist alcohol/domains
urllist alcohol/urls
}
dest chat {
domainlist chat/domains
urllist chat/urls
}
dest dating {
domainlist dating/domains
urllist dating/urls
}
dest drugs {
domainlist drugs/domains
urllist drugs/urls
}
dest gamble {
domainlist gamble/domains
urllist gamble/urls
}
dest hacking {
domainlist hacking/domains
urllist hacking/urls
}
dest jobsearch {
domainlist jobsearch/domains
urllist jobsearch/urls
}
dest models {
domainlist models/domains
urllist models/urls
}
dest movies {
domainlist movies/domains
urllist movies/urls
}
dest redirector {
domainlist redirector/domains
urllist redirector/urls
}
dest ringtones {
domainlist ringtones/domains
urllist ringtones/urls
}
dest sex {
domainlist sex/lingerie/domains
urllist sex/lingerie/urls
}
dest socialnet {
domainlist socialnet/domains
urllist socialnet/urls
}
dest spyware {
domainlist spyware/domains
urllist spyware/urls
}
dest tracker {
domainlist tracker/domains
urllist tracker/urls
}
dest violence {
domainlist violence/domains
urllist violence/urls
}
dest warez {
domainlist warez/domains
urllist violence/urls
}
dest weapons {
domainlist weapons/domains
urllist weapons/urls
}
dest webphone {
domainlist webphone/domains
urllist webphone/urls
}
dest webtv {
domainlist webtv/domains
urllist webtv/urls
}
dest outros {
domainlist outros/domains
urllist outros/urls
}
src admins {
ip 192.168.1.10-192.168.1.99
}
src remote {
ip 192.168.1.100-192.168.1.150
}
acl {
admins {
pass all
}
}
acl {
default {
pass white redirector !
[*****] !adv !aggressive !alcohol !chat !dating !drugs !gamble !hacking !jobsearch !models !movies !ringtones !sex !socialnet !spyware !tracker !violence !warez !weapons !webphone !webtv !outros !in-addr all redirect
http://192.168.1.66/block.html
}
}
como podem ver retirei a "!" da frente de alguns nomes desta forma concedendo acesso as demais maquinas para a determinada categoria, porém isto de fato nao esta acontecendo.
