Squid
Добавлено: 2007-05-29 14:46:15
Подскажите пожалуйста где в конфиге squid ошибка?
http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 128 MB
maximum_object_size 8092 KB
maximum_object_size_in_memory 512 KB
cache_dir ufs /usr/local/squid/cache 2048 64 256
access_log /usr/local/squid/logs/access.log squid
cache_log /usr/local/squid/logs/cache.log
cache_store_log /usr/local/squid/logs/store.log
cache_mgr admin@myhost.com
visible_hostname имя_хоста
tcp_outgoing_address 194.29.186.84
logfile_rotate 10
mime_table /usr/local/etc/squid/mime.conf
pid_filename /var/run/squid.pid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
# ACCESS CONTROLS
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl CONNECT method CONNECT
acl our_network src 192.168.0.0/24
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl BadUrlPath urlpath_regex -i "/usr/local/etc/squid/access/squid.badurlpath"
acl admin src 192.168.0.55
http_access allow admin BadUrlPath
http_access deny BadUrlPath
acl Denysites dstdomain \
"/usr/local/etc/squid/access/deny_sites.conf"
acl admin2 src 192.168.0.55
http_access allow Denysites admin2
http_access deny Denysites all
http_access allow localhost
http_access allow our_network
http_access allow Safe_ports
http_access deny all
не пойму запускаю проверяю с левого внешнего ип вроде как не пускает леваков
проходит какое-то время и мои squid все-равно начинают юзать, толи при помощи эксплоита толи из-за неправильного конфига.
http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 128 MB
maximum_object_size 8092 KB
maximum_object_size_in_memory 512 KB
cache_dir ufs /usr/local/squid/cache 2048 64 256
access_log /usr/local/squid/logs/access.log squid
cache_log /usr/local/squid/logs/cache.log
cache_store_log /usr/local/squid/logs/store.log
cache_mgr admin@myhost.com
visible_hostname имя_хоста
tcp_outgoing_address 194.29.186.84
logfile_rotate 10
mime_table /usr/local/etc/squid/mime.conf
pid_filename /var/run/squid.pid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
# ACCESS CONTROLS
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl CONNECT method CONNECT
acl our_network src 192.168.0.0/24
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl BadUrlPath urlpath_regex -i "/usr/local/etc/squid/access/squid.badurlpath"
acl admin src 192.168.0.55
http_access allow admin BadUrlPath
http_access deny BadUrlPath
acl Denysites dstdomain \
"/usr/local/etc/squid/access/deny_sites.conf"
acl admin2 src 192.168.0.55
http_access allow Denysites admin2
http_access deny Denysites all
http_access allow localhost
http_access allow our_network
http_access allow Safe_ports
http_access deny all
не пойму запускаю проверяю с левого внешнего ип вроде как не пускает леваков
проходит какое-то время и мои squid все-равно начинают юзать, толи при помощи эксплоита толи из-за неправильного конфига.
