сделал я так: 1) в squid.conf
http_port 3128
visible_hostname 172.16.113.59
udp_incoming_address 1.1.1.200
udp_outgoing_address 172.16.113.59
tcp_outgoing_address 172.16.113.59
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 64 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
cache_peer 162.64.176.70 parent 3133 0 no-query default
cache_dir ufs /usr/local/squid/cache 4096 16 256
cache_access_log /usr/local/squid/logs/access.log
cache_log /usr/local/squid/logs/cache.log
cache_store_log /usr/local/squid/logs/store.log
client_netmask 255.255.255.255
dns_nameservers 82.193.196.6 82.193.196.10
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
# ACCESS CONTROLS---------------------------------------------------------------
acl all src 0.0.0.0/0.0.0.0
acl all_dst dst 0.0.0.0/0.0.0.0
acl room src 1.1.1.0/255.255.255.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 1023 # http-local
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
#-----------------------------------------
acl ua_ix dst "/usr/local/etc/squid/ua-ix.list"
acl banners_file urlpath_regex "/usr/local/etc/squid/banners"
acl bad_url url_regex "/usr/local/etc/squid/bad_url"
acl good_url url_regex "/usr/local/etc/squid/good_url"
#--------------- вот собственно и сама нарезка трафика
cache_peer_access 162.64.176.70 deny ua_ix
cache_peer_access 162.64.176.70 allow all_dst
cache_peer_access 162.64.176.70 allow room
never_direct allow ua_ix
never_direct deny all_dst
http_access allow room manager localhost
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
http_access deny all !room
#-------------- banerorezka
http_access deny banners_file all !good_url
deny_info 18.gif bannners
http_access deny bad_url all !good_url
deny_info 18.gif bad_url
#--------------
2) дя эксперимента в файле ua-ix.list только ( сайт http://www.korrespondent.net)
212.82.212.203
-----------
РЕЗУЛЬТАТ:
- на всё остальное бегает через прокси прова (жаль а не надо было)
- а при доступе к http://www.korrespondent.net пишет в браузере:
---
ERROR
The requested URL could not be retrieved
--------------------------------------------------------------------------------
While trying to retrieve the URL: http://www.korrespondent.net/data/main.html
The following error was encountered:
Unable to forward this request at this time.
This request could not be forwarded to the origin server or to any parent caches. The most likely cause for this error is that:
The cache administrator does not allow this cache to make direct connections to origin servers, and
All configured parent caches are currently unreachable.
Your cache administrator is webmaster.
--------------------------------------------------------------------------------
Generated Fri, 26 May 2006 19:29:44 GMT by 172.16.113.59 (squid/2.5.STABLE13)
-----
чёт тут не то ...