Mohon pencerahan dari mas2 mbak2 jogxer.
Saya instal squid bawaan dari slas 10. client sudah diarahkan ke squid 
server dan sudah dapat mengakses dari internet. tapi saya cek di 
/var/log/squid/access.log kosong. Selain itu rule2 yang saya pake untuk 
memblok beberapa ip dari pc client tidak jalan (client yang diblok masih 
dapat mengakses ke internet) padahal dengan konfig tsb jalan di redhat 
9. konfig-nya kurang lebih spt ini :

http_port 8080
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 32 MB
cache_dir ufs /var/cache/squid 100 48 512
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
client_netmask 255.255.255.0
dns_nameservers 10.1.1.5
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl lan src 10.1.1.0/255.255.255.0
acl SSL_ports port 443 563
acl Safe_ports port 80        # http
acl Safe_ports port 21        # ftp
acl Safe_ports port 443 563    # https, snews
acl Safe_ports port 70        # gopher
acl Safe_ports port 210        # wais
acl Safe_ports port 1025-65535    # unregistered ports
acl Safe_ports port 280        # http-mgmt
acl Safe_ports port 488        # gss-http
acl Safe_ports port 591        # filemaker
acl Safe_ports port 777        # multiling http
acl CONNECT method CONNECT


acl konek src 10.1.1.3-10.1.1.5/255.255.255.255
acl blok src 10.1.1.11-10.1.1.14/255.255.255.255

http_access deny blok
http_access allow konek
http_access allow manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all

http_reply_access allow all
icp_access deny all
icp_access allow localhost
cache_effective_user squid
cache_effective_group squid
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

terima kasih sebelumnya....

Kirim email ke