На нем стоит Squid 2.6-STABLE5
Настроен на авторизацию по доменным учетным записям. Блокировки стоят только по сайтам.
Проблема: в инет ходит вся сеть, но в access.log не отображаются пользователи, только адреса машин.
access.log
Код: Выделить всё
1231925020.586 21 192.168.10.60 TCP_MISS/200 4638 GET http://www.rambler.ru/favicon.ico? - DIRECT/81.19.70.1 image/x-icon
1231925020.564 402 192.168.10.60 TCP_MISS/200 6526 CONNECT urs.microsoft.com:443 - DIRECT/213.199.161.250 -
Код: Выделить всё
http_port 192.168.10.61:3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 512 MB
cache_dir ufs /usr/share/squid/cache 50000 64 512
#logformat squid %ts.tu %6tr %>a %Ss/Hs %<st %rm %ru %un %Sh/%<A %mt
#logformat squidmime %ts.tu %6tr %>a %Ss/Hs %<st %rm %ru %un %Sh/%<A %mt [%>h] [%<h]
#logformat common %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st %Ss:%Sh
#logformat combined %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
cache_store_log none
hosts_file /etc/hosts
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --reguire-membership-of="JUST\\inet_users"
auth_param ntlm children 30
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of="JUST\\inet_users"
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
authenticate_cache_garbage_interval 10 seconds
external_acl_type inet_users %LOGIN \
/usr/lib/squid/wbinfo_group.pl
refresh_pattern ^ftp: &n... 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl local-10 src 192.168.10.0/255.255.255.0
acl local-20 src 192.168.20.0/255.255.255.0
#acl domain srcdomain .just.ru
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
# acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 910 # banks
acl SSL_ports port 8443 # banks
acl SSL_ports port 4500 # banks
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
# acl ICQ_ports port 5190 # ICQ
# acl purge method PURGE
acl JUST proxy_auth REQUIRED
acl CONNECT method CONNECT
acl inet_users external inet_users
http_access allow local-10
http_access allow local-20
http_access allow manager
http_access allow JUST inet_users
http_access deny all
# http_access deny to_localhost
# acl our_networks src 192.168.1.0/24 192.168.2.0/24
# http_access allow our_networks
http_access allow localhost
# http_reply_access allow all
cache_effective_user proxy
visible_hostname proxy.server
append_domain .just.ru
no_cache deny QUERY
error_directory /usr/share/squid/errors/Russian-1251
coredump_dir /var/spool/squid
redirect_program /usr/local/rejik3/redirector /usr/local/rejik3/redirector.conf
