URL: https://www.opennet.me/cgi-bin/openforum/vsluhboard.cgi
Форум: vsluhforumID12
Нить номер: 5251
[ Назад ]

Исходное сообщение
"Squid is not showing needed deny_info."

Отправлено eXtremer , 26-Ноя-07 12:50 
#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
#acl Safe_ports port 70         # gopher
#acl Safe_ports port 210        # wais
acl Safe_ports port 1025-65535  # unregistered ports
#acl Safe_ports port 280                # http-mgmt
#acl Safe_ports port 488                # gss-http
#acl Safe_ports port 591                # filemaker
#acl Safe_ports port 777                # multiling http
acl CONNECT method CONNECT


#-------------Extensii interzise video-audio-exec-------------
acl music-video urlpath_regex -i "/etc/squid/deny/ext.block"

#------------Banner-Reklama-Advertise------------
acl BANNER url_regex banner reclama linkexch banpics us\.yimg\.com[\./]ad[s]?[\./]

#--------Site-uri games-porno-music-other-spyware-chat-------------
acl porno url_regex -i "/etc/squid/deny/porn.block"
acl games url_regex -i "/etc/squid/deny/games.block"
acl multimedia url_regex -i "/etc/squid/deny/multimedia.block"
acl other url_regex -i "/etc/squid/deny/other.block"
acl adv url_regex -i "/etc/squid/deny/banner.block"
acl chat url_regex -i "/etc/squid/deny/chat.block"


#--------------Reteaua 10 si 200------------------

acl 1 src 192.168.1.2-192.168.1.11
acl 10 src 192.168.10.1-192.168.10.124
acl subsol src 192.168.1.50/32


#-----------------------Restrictii-----------------------

#---Restrictie ptr extensii interzise---
http_access deny music-video !1 !10
deny_info ERR_ACCESS_DENIED_EXT music-video !1 !10

#---Restrictie ptr bannere---
http_access deny BANNER
deny_info http://192.168.1.10/spam/nospam.gif BANNER
#deny_info ERR_ACCESS_DENIED_NOBANNER BANNER

#---Restrictie ptr site-uri cu jocuri---
http_access deny games !1 !10
deny_info ERR_ACCESS_DENIED_GAME games !1 !10

#---Restrictie ptr site-uri porno---
http_access deny porno !1 !10
deny_info ERR_ACCESS_DENIED_PORNO porno !1 !10

#---Restrictie ptr site-uri audio-video---
http_access deny multimedia !1 !10
deny_info ERR_ACCESS_DENIED_MULTIMEDIA multimedia !1 !10

#---Restrictie ptr tot ce nu se include in music-porno-filme---
http_access deny other !1 !10
deny_info ERR_ACCESS_DENIED_OTHER other !1 !10

#---Restrictie ptr banere-reklama-advertise---
http_access deny adv
deny_info http://192.168.1.10/spam/nospam.gif adv
#deny_info ERR_ACCESS_DENIED_NOBANNER adv

#---Restrictie ptr chat---
http_access deny chat !1 !10
deny_info ERR_ACCESS_DENIED_CHAT chat !1 !10

#---Restrictie ptr toti in afara de reteaua 10 si 100---
http_access deny all !1 !10 !subsol !localhost


#  TAG: http_access

#Recommended minimum configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports


----------------------------------------------------------------

deny_info is not working properly!
It only shows the default ERR and not those that I wont :

deny_info ERR_ACCESS_DENIED_EXT music-video
deny_info ERR_ACCESS_DENIED_GAME games
deny_info ERR_ACCESS_DENIED_PORNO porno
deny_info ERR_ACCESS_DENIED_MULTIMEDIA multimedia
deny_info ERR_ACCESS_DENIED_OTHER other
deny_info ERR_ACCESS_DENIED_CHAT chat


just this: deny_info http://192.168.1.10/spam/nospam.gif BANNER
and this : deny_info http://192.168.1.10/spam/nospam.gif adv

are shown corectly.

why ?


Содержание

Сообщения в этом обсуждении
"Squid is not showing needed deny_info."
Отправлено ipmanyak , 26-Ноя-07 20:51 
http://192.168.1.10/spam/nospam.gif BANNER
А кто будет это показывать? Squid - нет! Это должен показывать WEB server, например APACH

"Squid is not showing needed deny_info."
Отправлено eXtremer , 27-Ноя-07 10:30 
>http://192.168.1.10/spam/nospam.gif BANNER
>А кто будет это показывать? Squid - нет! Это должен показывать WEB
>server, например APACH

Da da, ya znaiu !
Off course Apache, it's isntalled & it's working.
why "text" deny_info is not working properly ?


"Squid is not showing needed deny_info."
Отправлено ipmanyak , 27-Ноя-07 12:34 
>>http://192.168.1.10/spam/nospam.gif BANNER
>>А кто будет это показывать? Squid - нет! Это должен показывать WEB
>>server, например APACH
>
>Da da, ya znaiu !
>Off course Apache, it's isntalled & it's working.
>why "text" deny_info is not working properly ?

Потому что не настроил апач как следует!  Каталог spam  объявил в нем?


"Squid is not showing needed deny_info."
Отправлено eXtremer , 27-Ноя-07 14:49 
>>>http://192.168.1.10/spam/nospam.gif BANNER
>>>А кто будет это показывать? Squid - нет! Это должен показывать WEB
>>>server, например APACH
>>
>>Da da, ya znaiu !
>>Off course Apache, it's isntalled & it's working.
>>why "text" deny_info is not working properly ?
>
>Потому что не настроил апач как следует!  Каталог spam  объявил
>в нем?

ipmanyak, you don't understant !
..the deny_info using http:// is working fine !!!
the problem is with the other deny_info

This ERR :

eny_info ERR_ACCESS_DENIED_EXT music-video
deny_info ERR_ACCESS_DENIED_GAME games
deny_info ERR_ACCESS_DENIED_PORNO porno
deny_info ERR_ACCESS_DENIED_MULTIMEDIA multimedia
deny_info ERR_ACCESS_DENIED_OTHER other
deny_info ERR_ACCESS_DENIED_CHAT chat

It doesn't show this errors, it shows the default error !


"Squid is not showing needed deny_info."
Отправлено ipmanyak , 28-Ноя-07 07:00 
>[оверквотинг удален]
>This ERR :
>
>eny_info ERR_ACCESS_DENIED_EXT music-video
>deny_info ERR_ACCESS_DENIED_GAME games
>deny_info ERR_ACCESS_DENIED_PORNO porno
>deny_info ERR_ACCESS_DENIED_MULTIMEDIA multimedia
>deny_info ERR_ACCESS_DENIED_OTHER other
>deny_info ERR_ACCESS_DENIED_CHAT chat
>
>It doesn't show this errors, it shows the default error !

Включи debug в конфиге сквида на уровень 9 и смотри cache.log