+ Responder ao Tópico



  1. Fala galera,
    blz?

    Seguinte, temos 2 links: 1 EBT e outro Mundivox... seguinte quando os ips locais (usuarios) estao saindo pela Mundivox /etc/ips.link2 tcp_outgoing, beleza... sai na boa, rapidinho, tranquilo... agora quando estão na Embratel não trafega de forma alguma, da erro de DNS, da Timeout... poxa, tava tudo funcionando perfeito... só foi eu trocar o cache_mem e trocar o tamanho do arquivo cache padrao e alguns ajustes que não trafega de forma alguma pela Embratel... apenas sites q estao no meu cache do browser trafega e rapido....

    Alguem poderia me ajudar? Existe algum comando pra sei la limpar os caches ou criar 2 caches... sei lá to perdidinho...

    Obrigado amigos, segue o meu squid.conf...

    http_port 3128
    visible_hostname firewall.pcebr.com.br
    cache_effective_user proxy
    cache_effective_group proxy
    cache_log /var/log/squid/cache.log
    cache_access_log /var/log/squid/access.log
    # cache_store_log /var/log/squid/store.log
    cache_mem 512 MB
    cache_dir diskd /var/spool/squid 50000 64 256 Q1=64 Q2=72
    maximum_object_size 102400 KB
    minimum_object_size 0 KB
    maximum_object_size_in_memory 100 KB
    cache_swap_low 90
    cache_swap_high 95
    hierarchy_stoplist cgi-bin ?
    acl QUERY urlpath_regex cgi-bin \?
    ipcache_size 1024
    ipcache_low 90
    ipcache_high 95
    fqdncache_size 1024
    memory_replacement_policy heap GDSF
    cache_replacement_policy heap LFUDA
    no_cache deny QUERY
    auth_param ntlm program /usr/bin/ntlm_auth = PCEBR/pcebr.com.br --helper-protocol=squid-2.5-ntlmssp
    auth_param basic program /usr/bin/ntlm_auth PCEBR/pcebr.com.br --helper-protocol=squid-2.5-basic
    auth_param basic children 20
    auth_param ntlm children 20
    auth_param ntlm keep_alive on
    auth_param basic credentialsttl 2 hours
    auth_param basic realm Proxy Server

    dns_nameservers 127.0.0.1

    refresh_pattern ^ftp: 1440 20% 10080
    refresh_pattern ^gopher: 1440 0% 1440
    refresh_pattern . 0 20% 4320

    # ACL Gerais
    acl all src 0.0.0.0/0.0.0.0
    acl manager proto cache_object
    acl localhost src 127.0.0.1/255.255.255.255
    acl to_localhost dst 127.0.0.0/8
    acl SSL_ports port 443 563
    acl Safe_ports port 80 # http
    acl Safe_ports port 21 # ftp
    acl Safe_ports port 443 563 # https, snews
    acl Safe_ports port 70 # gopher
    acl Safe_ports port 210 # wais
    acl Safe_ports port 1025-65535 # unregistered ports
    acl Safe_ports port 280 # http-mgmt
    acl Safe_ports port 488 # gss-http
    acl Safe_ports port 591 # filemaker
    acl Safe_ports port 777 # multiling http
    acl CONNECT method CONNECT
    acl acesso proxy_auth REQUIRED # Solicitando a autenticação

    # BLOQUEIO DE SITES POR EXTENSAO

    acl msnblock dstdomain "/etc/squid/controle/msnblock"
    acl blacklist dstdomain "/etc/squid/controle/blacklist"
    acl blacklist dstdomain "/etc/squid/controle/blacklist"
    #acl extensoes url_regex "/etc/squid/controle/extensoes"

    ## Bloqueio de Mime ## Bloqueando requisicoes mime types.

    acl mimeblockq req_mime_type -i ^application/x-icq$
    acl mimeblockq req_mime_type -i ^application/x-comet-log$
    acl mimeblockq req_mime_type -i ^application/x-pncmd$
    acl mimeblockq req_mime_type -i ^application/x-hotbar-xip20$
    acl mimeblockq req_mime_type -i ^.AIM.
    acl mimeblockq req_mime_type -i ^application/stream$
    acl mimeblockq req_mime_type -i application/stream
    acl mimeblockq req_mime_type -i ^application/octet-stream$
    acl mimeblockq req_mime_type -i application/octet-stream
    acl mimeblockq req_mime_type -i ^application/x-mplayer2$
    acl mimeblockq req_mime_type -i application/x-mplayer2
    acl mimeblockq req_mime_type -i ^application/x-oleobject$
    acl mimeblockq req_mime_type -i application/x-oleobject
    acl mimeblockq req_mime_type -i application/x-pncmd
    acl mimeblockq req_mime_type -i ^video/x-ms-asf$
    acl mimeblockp rep_mime_type -i ^application/x-mplayer2$
    acl mimeblockp rep_mime_type -i application/x-mplayer2
    acl mimeblockp rep_mime_type -i ^application/x-oleobject$
    acl mimeblockp rep_mime_type -i application/x-oleobject
    acl mimeblockp rep_mime_type -i application/x-pncmd
    acl mimeblockp rep_mime_type -i ^video/x-ms-asf$
    acl mimeblockp rep_mime_type -i ^application/x-icq$
    acl mimeblockp rep_mime_type -i ^.AIM.
    acl mimeblockp rep_mime_type -i ^.*AIM/HTTP
    acl mimeblockp rep_mime_type -i ^application/x-comet-log$
    acl mimeblockp rep_mime_type -i ^application/x-pncmd$
    acl mimeblockp rep_mime_type -i ^application/x-chaincast$
    acl mimeblockp rep_mime_type -i ^application/x-hotbar-xip20$
    acl mimeblockp rep_mime_type -i ^application/rhythmbox$
    acl mimeblockp rep_mime_type -i application/rhythmbox
    ## Barrar downloads de multimidia - incluindo streaming de audio.
    acl useragent browser -i ^.NSPlayer.
    acl useragent browser -i ^.player.
    acl useragent browser -i ^.Windows-Media-Player.
    acl useragent browser -i ^.rhythmbox.
    acl useragentq rep_mime_type ^.video.
    acl useragentq rep_mime_type ^.audio.
    acl useragentq rep_mime_type ^.stream.

    # ACL CONTROLE DO AD

    external_acl_type nt_group ttl=0 %LOGIN /usr/lib/squid/wbinfo_group.pl
    acl UserPadrao external nt_group userpadrao
    acl UserAdmin external nt_group adminnet
    acl UserMsn external nt_group msnallow


    # ACL Padroes
    http_access deny !Safe_ports
    http_access deny CONNECT !SSL_ports

    # ACL DIRECIONAMENTO DE LINK

    acl ips_link2 src "/etc/ips.link2"
    tcp_outgoing_address 200.196.54.36 ips_link2

    acl ips_link1 src "/etc/ips.link1"
    tcp_outgoing_address 201.73.46.36 ips_link1

    # Permissoes....
    http_access deny UserPadrao msnblock
    http_access deny UserPadrao blacklist
    #http_access deny UserPadrao extensoes
    http_access allow ips_link1
    http_access allow ips_link2
    #

    http_access allow manager localhost
    http_access deny manager
    http_access deny all

    http_reply_access allow all
    icp_access allow all

    coredump_dir /usr/local/squid/var/cache
    error_directory /usr/share/squid/errors/Portuguese
    Última edição por halley; 13-06-2009 às 06:42.






Tópicos Similares

  1. Respostas: 26
    Último Post: 10-05-2017, 22:16
  2. Respostas: 8
    Último Post: 28-04-2017, 20:52
  3. Respostas: 8
    Último Post: 25-05-2008, 18:26
  4. Respostas: 13
    Último Post: 03-10-2007, 17:37
  5. Respostas: 11
    Último Post: 16-01-2007, 22:34

Visite: BR-Linux ·  VivaOLinux ·  Dicas-L