#Recommended minimum configuration: acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl asgard src 10.0.2.7/255.255.255.255 acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl Safe_ports port 901 # SWAT acl purge method PURGE acl CONNECT method CONNECT # TAG: http_access # Allowing or Denying access based on defined access lists # # Access to the HTTP port: # http_access allow|deny [!]aclname ... # # NOTE on default values: # # If there are no "access" lines present, the default is to deny # the request. # # If none of the "access" lines cause a match, the default is the # opposite of the last line in the list. If the last line was # deny, the default is allow. Conversely, if the last line # is allow, the default will be deny. For these reasons, it is a # good idea to have an "deny all" or "allow all" entry at the end # of your access lists to avoid potential confusion. # #Default: # http_access deny all # #Recommended minimum configuration: # # Only allow cachemgr access from localhost http_access allow manager localhost http_access deny manager # Only allow purge requests from localhost http_access allow purge localhost http_access deny purge # Deny requests to unknown ports http_access deny !Safe_ports # Deny CONNECT to other than SSL ports http_access deny CONNECT !SSL_ports # # We strongly recommend the following be uncommented to protect innocent # web applications running on the proxy server who think the only # one who can access services on "localhost" is a local user #http_access deny to_localhost # # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS # Example rule allowing access from your local networks. Adapt # to list your (internal) IP networks from where browsing should # be allowed #acl our_networks src 192.168.1.0/24 192.168.2.0/24 #http_access allow our_networks # Allow the localhost to have access by default http_access allow localhost http_access allow asgard acl irc-ports port 6667-6669 acl irc-ports port 7000-7770 http_access allow irc-ports - вот кусок правил. Короче для перца acl asgard src 10.0.2.7/255.255.255.255 я открыл проксю для проверки. Так вот он могёт ходить везде и в нете и в фтп и с аськой, а вот на ИРК его не пускает. Может кто подскажет где я лоханулся. Заранее спасибо!!!
Ответ на:
комментарий
от jackill
Ответ на:
комментарий
от cyclon
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.
Похожие темы
- Форум Не могу запретить пользваться сквидом. http_access deny all не помогает. (2003)
- Форум squid+icq (2005)
- Форум SQUID: проблема с запретом кеширования (2006)
- Форум Squid & url porn (2002)
- Форум Отключение кэширования для определенного сайта в squid (2012)
- Форум Squid как веб ускоритель (2005)
- Форум Squid3 (2013)
- Форум И снова Squid, разграничение доступа по логинам (2010)
- Форум Squid - access denied (2018)
- Форум squid - https фильтрация (2017)