Paginas com conteudo dinâmico não abrem no Squid

marioarmando
(usa Outra)

Enviado em 13/05/2013 - 14:07h

Ola, sou iniciante em Linux. Meu squid está rodando sem regra nenhuma redondinho. Só que agora preciso implementar alguns bloqueios até ai tudo bem (em partes :)) quando coloco regra:

http_access deny restrito !banco !email

as paginas com conteudo dinamico (Ex: Hotmail, sites de banco, Yahoo Mail) não carregam

sei que tem a ver com essas linhas

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

que estão devidamente declaradas no .conf

alguem poderia me dar uma luz???

segue meu conf



http_port 10.14.79.111:3128

visible_hostname servidor

cache_peer proxy3.redegov.sp.gov.br parent 80 0 no-query default

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

dns_nameservers 10.1.5.35 10.1.2.44

error_directory /usr/share/squid/errors/Portuguese

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 403 443 444 447 465 563 7443 1667 1669 10000
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl Safe_ports port 901
acl Safe_ports port 1025-65535
acl Safe_ports port 1669
acl purge method PURGE
acl CONNECT method CONNECT

####ACL Grupos de Acesso
acl ips_diretoria src "/etc/squid/acls/ips_diretoria.txt"
acl ips_restritos src "/etc/squid/acls/ips_restritos.txt"
acl ips_intermediarios src "/etc/squid/acls/ips_intermediarios.txt"

####ACLS Restrição de acesso
acl email url_regex -i "/etc/squid/acl/sites_email.txt"
acl almoco time "/etc/squid/acl/horario_almoco.txt"
acl plv_proibidas url_regex -i "/etc/squid/acl/plv_proibidas.txt"
acl ext_proibidas urlpath_regex -i "/etc/squid/acl/ext_proibidas.txt"
acl sites_banco url_regex -i "/etc/squid/acl/sites_banco.txt"
acl sites_governo url_regex "/etc/squid/acl/sites_governo.txt"
acl sites_bloqueados url_regex -i "/etc/squid/acl/sites_bloqueados.txt"
acl acl_url_im_skype url_regex ^((0|1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-5]|[3-9][0-9]{0,1})\.){3}(0|1[0-9]{0,2}|2[0-9]{0,1}|2[0-4][0-9]|25[0-5][3-9][0-9]{0,1})(:|/|$\?)
acl skype_ua browser ^skype^
acl msn urlpath_regex -i gateway.dll
acl msn1 req_mime_type application/x-msn-messenger
acl JAVA dstdomain "/etc/squid/acls/java.txt"
acl streaming rep_mime_type -i "/etc/squid/acl/audiovideo.txt"
http_reply_access deny streaming

always_direct allow sites_governo
always_direct allow almoco
always_direct allow sites_banco
always_direct allow email

access_log /var/log/squid/access.log

####Controle de acesso
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow ips_diretoria
http_access allow JAVA
http_access allow ips_intermediarios !plv_proibidas !ext_proibidas !streaming
http_access deny acl_url_im_skype
http_access deny skype_ua
http_access deny msn
http_access deny msn1
http_access allow sites_governo
http_access allow email
http_access allow ips_restritos
http_access deny all


icp_access allow all

miss_access allow all

never_direct allow all

cache_dir ufs /var/cache/squid 5000 20 256

cache_log /var/log/squid/cache.log

cache_mem 256 MB

cache_mgr webmaster

cache_replacement_policy lru

cache_store_log none

cache_swap_high 95

cache_swap_low 90

refresh_pattern ^ftp: 1400 20 10080
refresh_pattern ^gopher: 1440 0 1440
refresh_pattern . 0 20 4320
refresh_pattern hotmail\.com 4320 150% 10080 override-expire override-lastmod

client_lifetime 1 days

connect_timeout 999 minutes


ftp_passive on

maximum_object_size 512 MB

memory_replacement_policy lru

minimum_object_size 0 KB