• Embed Doc
  • Readcast
  • Collections
  • CommentGo Back
 
# Squid Alterado por Bruno - Padrao curso Impacta#Porta padrao do squid. se mudar alterar tambem no firewall. ATENCAOTIRAR NO PROXY DO MANDRIVA 2009 A OPCAO TRANSPARENTE.http_port 3128 transparent# Nao excluir essas 3 regras sobre cgi. protegendo sites seguros, poisnao permite fazer cache de CGI.hierarchy_stoplist cgi-bin ?acl QUERY urlpath_regex cgi-bin \?no_cache deny QUERY# Diretivas padrao do Squid do Mandriva 2009 rcache_dir diskd /var/spool/squid 256 256 256# Criar um arquivo de log para armazenar cachecache_store_log /var/log/squid/store.log#auth_param basic children 5#auth_param basic realm Squid proxy-caching web server#auth_param basic credentialsttl 2 hoursrefresh_pattern ^ftp: 1440 20% 10080refresh_pattern ^gopher: 1440 0% 1440refresh_pattern . 0 20% 4320half_closed_clients off# ACL padrao do Squidacl all src 0.0.0.0/0.0.0.0acl manager proto cache_objectacl localhost src 127.0.0.1/255.255.255.255acl to_localhost dst 127.0.0.0/8acl localnet src 10.0.0.0/8 # RFC1918 possible internal networkacl localnet src 172.16.0.0/12 # RFC1918 possible internal networkacl localnet src 192.168.0.0/16 # RFC1918 possible internal networkacl SSL_ports port 443 563acl Safe_ports port 80 # httpacl Safe_ports port 21 # ftpacl Safe_ports port 443 563 # https, snewsacl Safe_ports port 70 # gopheracl Safe_ports port 210 # waisacl Safe_ports port 1025-65535 # unregistered portsacl Safe_ports port 280 # http-mgmtacl Safe_ports port 488 # gss-httpacl Safe_ports port 591 # filemakeracl Safe_ports port 777 # multiling httpacl Safe_ports port 901# SWATacl CONNECT method CONNECT# Minhas ACL's - Nao precisa estar na ordem.acl eumesmo src 130.54.10.10acl minharede src 130.54.0.0/16acl bruno src 130.54.10.249acl sites_negados url_regex -i "/etc/squid/sites_negados"acl sites_permitidos url_regex -i "/etc/squid/sites_permitidos"# Acessos padrao do Squid - Mandrivahttp_access allow manager localhosthttp_access deny managerhttp_access deny !Safe_portshttp_access deny CONNECT !SSL_ports
of 00

Leave a Comment

You must be to leave a comment.
Submit
Characters: ...
You must be to leave a comment.
Submit
Characters: ...