FreeBSD - SQUID

[youko]

Цитата youko:



Правильно я проверил???

FreeBSD - SQUID

Да.

Так и смотрится, по логам...

[youko]

ок, Всем Спасибо. Тема закрыта!

[youko]

народ помогите плиз

у меня открытый фаер с заворачиванием на сквид



конфиг:

00050 divert 8668 ip4 from any to any via em1

00055 fwd 172.21.0.1,3128 tcp from 172.21.0.0/16 to any dst-port 80,8080,443 via em0

00100 allow ip from any to any via lo0

00200 deny ip from any to 127.0.0.0/8

00300 deny ip from 127.0.0.0/8 to any

65000 allow ip from any to any



em0 -смотрит в локалку



конфиг SQUID'а:



acl manager proto cache_object

acl porn url_regex "/usr/local/etc/squid/conf/porn"

acl zapret url_regex "/usr/local/etc/squid/conf/zapret"

acl localhost src 127.0.0.1/32

acl to_localhost dst 127.0.0.0/8 0.0.0.0/32

#acl localnet src 10.0.0.0/8 # RFC1918 possible internal network

#acl localnet src 172.16.0.0/16 # RFC1918 possible internal network

#acl localnet src 192.168.0.0/24 # RFC1918 possible internal network

acl localnet src 172.21.0.0/24 # RFC1918 possible internal network

acl SSL_ports port 443

acl Safe_ports port 80 # http

acl Safe_ports port 21 # ftp

acl Safe_ports port 443 # https

acl Safe_ports port 70 # gopher

acl Safe_ports port 210 # wais

acl Safe_ports port 1025-65535 # unregistered ports

acl Safe_ports port 280 # http-mgmt

acl Safe_ports port 488 # gss-http

acl Safe_ports port 591 # filemaker

acl Safe_ports port 777 # multiling http

acl CONNECT method CONNECT

http_access deny zapret all

http_access deny porn all

http_access allow manager localhost

http_access deny manager

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access allow localnet

http_access deny all

icp_access allow localnet

icp_access deny all

htcp_access allow localnet

htcp_access deny all

http_port 172.21.0.1:3128 transparent

hierarchy_stoplist cgi-bin ?

access_log /usr/local/etc/squid/logs/access.log squid

refresh_pattern ^ftp: 1440 20% 10080

refresh_pattern ^gopher: 1440 0% 1440

refresh_pattern (cgi-bin|\?) 0 0% 0

refresh_pattern . 0 20% 4320

icp_port 3130

visible_hostname FRYA

error_directory /usr/local/etc/squid/errors/Russian-1251

coredump_dir /usr/local/squid/cache

dns_nameservers 192.168.82.201 192.168.82.200





cat /usr/local/etc/squid/logs/access.log



1274376361.909 13 172.21.0.2 TCP_DENIED/403 1225 GET

http://ya.ru/

- NONE/- text/html



в чем затык?

[gf100]

lcnet, ошибка появляется в любом случае? - прокси прописан/нет в браузере?



Если поменять правило "http_access deny all" на разрешающее результат изменится?