forum.lissyara.su

Код: Выделить всё

Squid Cache: Version 3.0.STABLE8
configure options:  '--with-default-user=squid' '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=lru heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--enable-auth=basic ntlm digest' '--enable-basic-auth-helpers=DB NCSA PAM MSNT SMB squid_radius_auth YP' '--enable-digest-auth-helpers=password' '--enable-external-acl-helpers=ip_user session unix_group wbinfo_group' '--enable-ntlm-auth-helpers=SMB' '--enable-storeio=ufs diskd null' '--enable-delay-pools' '--disable-snmp' '--disable-wccp' '--disable-ident-lookups' '--enable-arp-acl' '--enable-kqueue' '--with-large-files' '--enable-err-languages=Armenian Azerbaijani Bulgarian Catalan Czech Danish  Dutch English Estonian Finnish French German Greek  Hebrew Hungarian Italian Japanese Korean Lithuanian  Polish Portuguese Romanian Russian-1251 Russian-koi8-r  Serbian Simplify_Chinese Slovak Spanish Swedish  Traditional_Chinese Turkish Ukrainian-1251  Ukrainian-koi8-u Ukrainian-utf8' '--enable-default-err-language=English' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd7.0' 'build_alias=i386-portbld-freebsd7.0' 'CC=cc' 'CFLAGS=-O2 -fno-strict-aliasing -pipe' 'LDFLAGS=' 'CPPFLAGS=' 'CXX=c++' 'CXXFLAGS=-O2 -fno-strict-aliasing -pipe'

Код: Выделить всё

1227462930.024      1 192.168.0.119 TCP_DENIED/403 1311 CONNECT urs.microsoft.com:443 - NONE/- text/html
1227462930.051      1 192.168.0.119 TCP_DENIED/403 1311 CONNECT urs.microsoft.com:443 - NONE/- text/html
1227619375.701     29 192.168.0.133 TCP_DENIED/403 1311 CONNECT urs.microsoft.cm:443 - NONE/- text/html
1227619375.701     29 192.168.0.133 TCP_DENIED/403 1311 CONNECT urs.microsoft.cm:443 - NONE/- text/html

Код: Выделить всё

2008/11/21 11:41:29| tunnelReadServer: FD 38: read failure: (0) Unknown error:
0
2008/11/21 12:38:12| tunnelReadServer: FD 20: read failure: (0) Unknown error: 0
2008/11/21 12:40:56| tunnelReadServer: FD 20: read failure: (0) Unknown error: 0
2008/11/21 12:57:34| tunnelReadServer: FD 21: read failure: (0) Unknown error: 0
2008/11/24 11:40:14| comm_old_accept: FD 15: (53) Software caused connection abort
2008/11/24 11:40:14| httpAccept: FD 15: accept failure: (53) Software caused connection abort
2008/11/24 11:40:14| comm_old_accept: FD 15: (53) Software caused connection abort
2008/11/24 11:40:14| httpAccept: FD 15: accept failure: (53) Software caused connection abort

Код: Выделить всё

proxy# cat squid.conf
http_port 3128

#cache_peer 127.0.0.1 parent 8888 0 no-query no-digest no-netdb-exchange default

#cache_mem 8 MB
cache_mem 96 MB
cache_swap_low 90
cache_swap_high 95

visible_hostname proxy.domain.loc

cache_effective_user squid
cache_effective_group squid


maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 8 KB

ipcache_size 1024
ipcache_low 90
ipcache_high 95

fqdncache_size 1024

cache_replacement_policy lru

memory_replacement_policy lru

#cache_dir ufs /share/squid/cache 100 16 256
cache_dir ufs /var/db/squid/cache 3000 10 128


#url_rewrite_program /usr/local/bin/squidGuard -c /usr/local/etc/squid/squidGuard.conf
#url_rewrite_children 10


access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
#cache_store_log /var/log/squid/store.log
cache_store_log none
mime_table /usr/local/etc/squid/mime.conf
pid_filename /var/log/squid/squid.pid

icon_directory /usr/local/etc/squid/icons
error_directory /usr/local/etc/squid/errors/Russian-1251

coredump_dir /var/db/squid/cache

log_ip_on_direct off

#auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
#auth_param ntlm children 5

auth_param basic program /usr/local/libexec/squid/ncsa_auth /usr/local/etc/squid/ACL/passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off


#authenticate_ip_ttl 8 hours
authenticate_ip_ttl 20 seconds

request_header_max_size 40 KB
request_body_max_size 0 KB

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320



#client_lifetime 3 hours
client_lifetime 3 hours

shutdown_lifetime 10 seconds

acl QUERY urlpath_regex cgi_bin \?
cache deny QUERY

#acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80          # http
#acl Safe_ports port 21         # ftp
#acl Safe_ports port 443                # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
#acl Safe_ports port 2083       # multiling http
#acl ICQ_ports port 5190        # ICQ
#acl Magent_ports port 2041 2042 #Magent
acl CONNECT method CONNECT
acl HTTP proto HTTP
acl HTTPS proto HTTPS
acl FTP proto FTP

#never_direct allow HTTP
#never_direct allow HTTPS

#acl mac_address arp "/usr/local/etc/squid/ACL/mac_address"

#acl gods proxy_auth "/usr/local/etc/squid/ACL/users/gods.conf"
acl pass proxy_auth REQUIRED
acl allowed_clients src 192.168.0.20 192.168.0.86 192.168.0.121 192.168.0.143 192.168.0.144 192.168.0.87 192.168.0.104 192.168.0.105 192.168.0.107 192.168.0.108 192.168.0.109 192.168.0.111 192.168.0.115 192.168.0.117 192.168.0.118 192.168.0.128 192.168.0.131 192.168.0.132 192.168.0.139 192.168.0.140 192.168.0.141 192.168.0.101 192.168.0.8
acl allowed_clients2 src 192.168.0.20 192.168.0.121 192.168.0.143 192.168.0.144

acl restricted_sites url_regex "/usr/local/etc/squid/ACL/domains"
acl restricted_sites2 url_regex "/usr/local/etc/squid/ACL/domains2"

acl BUTIK dstdomain www.domain.ru


#acl cachemgr proxy_auth "/usr/local/etc/squid/ACL/users/cachemgr.conf"
#acl admins proxy_auth "/usr/local/etc/squid/ACL/users/admins.conf"
#acl power_users proxy_auth "/usr/local/etc/squid/ACL/users/pusers.conf"
#acl users proxy_auth "/usr/local/etc/squid/ACL/users/users.conf"
#acl guests proxy_auth "/usr/local/etc/squid/ACL/users/guests.conf"

http_access allow manager localhost
http_access deny manager

#http_access allow restricted_sites2
http_access allow allowed_clients2 restricted_sites2
http_access deny restricted_sites2

http_access deny restricted_sites
http_access deny !allowed_clients
http_access allow pass


#http_access deny CONNECT !SSL_ports !ICQ_ports !Magent_ports
http_access deny CONNECT !SSL_ports
http_access deny !Safe_ports
http_access deny to_localhost




#http_access deny all !mac_address
#http_access allow gods
#http_access allow all
#http_access allow cachemgr
#http_access allow admins
#http_access allow power_users
#http_access allow users
#http_access allow guests

http_access deny all