2013-06-22 56 views
2

我希望有一些魷魚專家。 我想配置我的squid.conf文件。 配置工作,但現在的問題是: 當我試圖阻止只有一個站點,它阻止一切...Squid3 URL Block

這裏是我的代碼:

acl manager proto cache_object 
acl localhost src 127.0.0.1/32 ::1 
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1 

acl biz_network src 10.1.42.0/24 
acl biz_hours time M T W T F 9:00-17:00 

acl SSL_ports port 443 
acl Safe_ports port 80  # http 
acl Safe_ports port 21  # ftp 
acl Safe_ports port 443  # https 
acl Safe_ports port 70  # gopher 
acl Safe_ports port 210  # wais 
acl Safe_ports port 1025-65535 # unregistered ports 
acl Safe_ports port 280  # http-mgmt 
acl Safe_ports port 488  # gss-http 
acl Safe_ports port 591  # filemaker 
acl Safe_ports port 777  # multiling http 
acl CONNECT method CONNECT 

acl fortytwo_network src 192.168.42.0/24 
acl bad_url dstdomain .msn.com   #### THIS IS THE 1ST LINE THAT CAUSE A PROBLEM #### 

http_access allow biz_network biz_hours 
http_access allow fortytwo_network 

http_access deny bad_url     #### THIS IS THE 2ND LINE THAT CAUSE A PROBLEM #### 

http_access allow manager localhost 
http_access deny manager 
http_access deny !Safe_ports 
http_access deny CONNECT !SSL_ports 
http_access allow localhost 
http_access deny all 
http_port 8080 

coredump_dir /var/spool/squid3 
refresh_pattern ^ftp:  1440 20% 10080 
refresh_pattern ^gopher: 1440 0% 1440 
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 
refresh_pattern (Release|Packages(.gz)*)$  0  20%  2880 
refresh_pattern .  0 20% 4320 
visible_hostname BenNahmias 

粗線將盡一切網址封鎖

沒有這行,我可以訪問所有URL的

我的問題是,什麼是線的正確順序(這些標誌着我),所以外核層我選擇的網站將被封鎖。

- 在此先感謝,Orel。

回答

0

你可以試試這個方法:

刪除這一行:

acl bad_url dstdomain .msn.com 

您已經添加了這一行:

http_access deny bad_url 

確保你寫你自己的DNS黑名單有關bad_url acl here:

/etc/squid/bad-sites.squid 

,如果你不知道實現,但它看起來是這樣的:

.test.com 
.badurl.net 

對於某些網站,如Facebook,它更好地使用正則表達式。收藏此對你魷魚的conf

acl fbban dstdom_regex facebook 
http_access deny fbban 

重新啓動魷魚

/sbin/service squid stop 
/sbin/service squid start 

/etc/init.d/squid stop 
/etc/init.d/squid restart