Pessoal estou tendo problemas para configurar um proxy
transparente e resolvi ir por partes nos problemas
para no final achar a solu��o.
Preciso de ajuda de voc�s para conferir se meu
squid.conf est� corretamente configurado para o "proxy
transparente", caso encontrem problemas ou achem
melhorias me avisem, ok !
Detalhe que ao se colocar nos navegadores a
configura��o do proxy tudo funciona beleza, at� logs
no squid s�o gerados. Mas ao se tirar as mesmas o
squid n�o fica ativo nos usu�rios.
O linux � um conectiva 8. E o squid e o que vem no cd
do mesmo.
Ai v�o as principais regras do arquivo:

-----------------------------------------------------------

http_port 3128

acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

cache_mem 32 MB

cache_swap_low 90
cache_swap_high 95

maximum_object_size 4096 KB

cache_dir ufs /var/cache/squid 300 16 256

cache_access_log /var/log/squid/access.log

cache_log /var/log/squid/cache.log

#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
acl rede_interna src 192.168.0.0
acl horario time MTWHF 09:00-20:00

#Default:
# http_access deny all
#
#Recommended minimum configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM
YOUR CLIENTS
#
# And finally deny all other access to this proxy
#http_access allow all
http_access allow rede_interna horario
http_access deny all

icp_access allow all

cache_effective_user proxy
cache_effective_group proxy

httpd_accel_host virtual
httpd_accel_port 80

httpd_accel_with_proxy on

httpd_accel_uses_host_header on

----------------------------------------------------------

Robson.


______________________________________________________________________

Yahoo! GeoCities: a maneira mais f�cil de criar seu web site gr�tis!
http://br.geocities.yahoo.com/
---------------------------------------------------------------------------
Esta lista � patrocinada pela Conectiva S.A. Visite http://www.conectiva.com.br

Arquivo: http://bazar2.conectiva.com.br/mailman/listinfo/linux-br
Regras de utiliza��o da lista: http://linux-br.conectiva.com.br
FAQ: http://www.zago.eti.br/menu.html

Responder a