Liberando MSN

marcelohbr
(usa CentOS)

Enviado em 13/07/2011 - 09:31h

Primeiro vou mostrar os logs:
MSN do Cliente
1310559592.820 2451 192.168.0.142 TCP_MISS/200 25917 CONNECT login.live.com:443 suporte DIRECT/65.54.186.77 -
1310559594.134 0 192.168.0.142 TCP_DENIED/407 1848 CONNECT byrdr.omega.contacts.msn.com:443 - NONE/- text/html
1310559594.240 0 192.168.0.142 TCP_DENIED/407 1920 POST http://www.sqm.microsoft.com/sqm/messenger/sqmserver.dll - NONE/- text/html

Meu MSN
1310559669.798 2094 192.168.0.142 TCP_MISS/200 25869 CONNECT login.live.com:443 suporte DIRECT/65.54.186.107 -
1310559671.457 0 192.168.0.142 TCP_DENIED/407 1920 POST http://www.sqm.microsoft.com/sqm/messenger/sqmserver.dll - NONE/- text/html
1310559671.634 0 192.168.0.142 TCP_DENIED/407 1920 POST http://www.sqm.microsoft.com/sqm/messenger/sqmserver.dll - NONE/- text/html
1310559671.913 403 192.168.0.142 TCP_MISS/200 1103 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559671.980 470 192.168.0.142 TCP_MISS/200 1138 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.10 text/html
1310559672.051 534 192.168.0.142 TCP_MISS/200 1141 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.10 text/html
1310559672.245 752 192.168.0.142 TCP_MISS/302 1361 GET http://tdy.br.msn.com/w3/default.aspx? suporte DIRECT/65.55.17.30 text/html
1310559672.259 346 192.168.0.142 TCP_MISS/200 993 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559672.327 348 192.168.0.142 TCP_MISS/200 1192 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.10 text/html
1310559672.411 359 192.168.0.142 TCP_MISS/200 1128 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.10 text/html
1310559672.553 293 192.168.0.142 TCP_MISS/200 1146 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559672.616 288 192.168.0.142 TCP_MISS/200 992 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.10 text/html
1310559672.711 286 192.168.0.142 TCP_MISS/200 1182 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.10 text/html
1310559672.800 554 192.168.0.142 TCP_MISS/200 1156 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559672.878 324 192.168.0.142 TCP_MISS/200 1110 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559672.937 320 192.168.0.142 TCP_MISS/200 991 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.10 text/html
1310559673.004 293 192.168.0.142 TCP_MISS/200 1117 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.10 text/html
1310559673.082 283 192.168.0.142 TCP_MISS/200 1110 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559673.162 285 192.168.0.142 TCP_MISS/200 1151 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559673.719 783 192.168.0.142 TCP_MISS/200 15027 GET http://tdy.br.msn.com/w3/default.aspx? suporte DIRECT/65.55.17.30 text/html
1310559673.782 62 192.168.0.142 TCP_IMS_HIT/304 370 GET http://analytics.live.com/analytics/wlAnalytics.js suporte NONE/- application/x-javascript
1310559674.117 296 192.168.0.142 TCP_MISS/200 570 GET http://udc.msn.com/c.gif? suporte DIRECT/65.54.68.12 image/gif
1310559674.187 299 192.168.0.142 TCP_MISS/204 618 GET http://b.scorecardresearch.com/b? suporte DIRECT/200.216.8.81 -
1310559674.434 316 192.168.0.142 TCP_REFRESH_HIT/304 352 GET http://www.bing.com/partner/primedns.gif suporte DIRECT/200.216.8.82 image/gif
1310559674.491 709 192.168.0.142 TCP_MISS/204 473 GET http://amer.rel.msn.com/default.aspx? suporte DIRECT/64.4.18.73 -
1310559674.548 718 192.168.0.142 TCP_MISS/200 418 GET http://view.atdmt.com/action/drv_MSN_Homepage/nc? suporte DIRECT/65.55.33.51 image/gif
1310559674.842 408 192.168.0.142 TCP_MISS/200 4168 GET http://col.stb00.s-msn.com/i/41/70B2F2A10153224C12A57089FAF4.jpg suporte DIRECT/65.54.85.157 image/jpeg
1310559674.851 615 192.168.0.142 TCP_MISS/200 602 GET http://c.msn.com/c.gif? suporte DIRECT/65.55.239.163 image/gif
1310559674.897 406 192.168.0.142 TCP_MISS/200 4582 GET http://col.stb00.s-msn.com/i/F9/2C182A90E396F8CE772AAB38010AA.jpg suporte DIRECT/65.54.85.157 image/jpeg
1310559675.144 293 192.168.0.142 TCP_MISS/200 2450 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559675.268 695 192.168.0.142 TCP_MISS/200 418 GET http://view.atdmt.com/action/drv_MSN_Today suporte DIRECT/65.55.33.51 image/gif
1310559675.437 541 192.168.0.142 TCP_MISS/200 1675 GET http://a.rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559675.619 181 192.168.0.142 TCP_MISS/204 618 GET http://b.scorecardresearch.com/b? suporte DIRECT/200.216.8.81 -
1310559676.087 538 192.168.0.142 TCP_MISS/200 2895 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? suporte DIRECT/63.241.108.124 text/html
1310559676.106 5 192.168.0.142 TCP_DENIED/407 1848 CONNECT byrdr.omega.contacts.msn.com:443 - NONE/- text/html
1310559676.118 572 192.168.0.142 TCP_MISS/304 536 GET http://analytics.live.com/Sync.html? suporte DIRECT/65.55.239.161 -
1310559676.155 4 192.168.0.142 TCP_DENIED/407 1848 CONNECT byrdr.omega.contacts.msn.com:443 - NONE/- text/html
1310559676.197 3 192.168.0.142 TCP_DENIED/407 1848 CONNECT byrdr.omega.contacts.msn.com:443 - NONE/- text/html
1310559676.241 3 192.168.0.142 TCP_DENIED/407 1848 CONNECT byrdr.omega.contacts.msn.com:443 - NONE/- text/html
1310559676.302 61 192.168.0.142 TCP_IMS_HIT/304 352 GET http://analytics.msn.com/Include.html suporte NONE/- text/html
1310559676.906 358 192.168.0.142 TCP_MISS/200 1665 GET http://rad.msn.com/ADSAdClient31.dll? suporte DIRECT/65.55.192.9 text/html
1310559677.734 828 192.168.0.142 TCP_MISS/200 5261 GET http://view.atdmt.com/MBZ/iview/msnnkbrc001234x60XimsptbX25X34Xm0000001mbz/direct;wi.234;hi.60/01? suporte DIRECT/65.55.33.51 text/html
1310559679.016 0 192.168.0.142 TCP_DENIED/407 1842 CONNECT by6.omega.contacts.msn.com:443 - NONE/- text/html
1310559679.019 0 192.168.0.142 TCP_DENIED/407 1848 CONNECT byrdr.omega.contacts.msn.com:443 - NONE/- text/html
1310559680.546 195 192.168.0.142 TCP_MISS/200 570 GET http://udc.msn.com/c.gif? suporte DIRECT/65.54.68.12 image/gif
1310559680.797 560 192.168.0.142 TCP_MISS/200 406 GET http://bs.serving-sys.com/BurstingPipe/adServer.bs? suporte DIRECT/63.241.108.124 text/html

O msn do clienta nao entra de forma alguma, mas o meu entra, msm dando aquele deny.
Já liberei tudo no squid e nao deu certo...
ele continua bloqueando.
Alguem me da uma luz, preciso resolver isso o mais rapido possivel...
Muito obrigado a todos!

renato_pacheco
(usa Debian)

Enviado em 13/07/2011 - 09:41h

Libere no seu squid a dll sqmserver.dll q dará tudo certo...

marcelohbr
(usa CentOS)

Enviado em 13/07/2011 - 09:54h

é o segunte brodi, se for liberar como url_regex, eu jah fiz em palavra_permitida. Porem isso nao deu certo...
HELP...

renato_pacheco
(usa Debian)

Enviado em 13/07/2011 - 10:11h

É essa forma ae msm q vc tem q fazer. Se não tá liberando ainda, o problema está nas ordens das suas regras. Reveja-as.

fs.schmidt
(usa CentOS)

Enviado em 13/07/2011 - 10:30h

Para liberar precisei deixar os seguintes dominios liberados: live.com msn.com msads.net atdmt.com serving-sys.com hotmail.com

marcelohbr
(usa CentOS)

Enviado em 13/07/2011 - 10:33h

Brodi, segui aki aminhas regras na ordem real q elas estao no SQUID. Confere pra mim e veja se elas estao na ordem correta?

# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

acl rede_cont src 192.168.0.0/24
acl rede_apto src 10.0.1.0/24
acl palavras_bloqueadas url_regex -i "/etc/squid/palavras_bloqueadas"
acl downloads_bloqueados url_regex -i "/etc/squid/downloads_bloqueados"
acl usuario_liberado proxy_auth -i "/etc/squid/usuario_liberado"
acl conectividade src "/etc/squid/conectividade" # ip's da caixa
acl conectividade1 dstdomain "/etc/squid/conectividade1" # url's da caixa
acl palavras_permitidas url_regex -i "/etc/squid/palavras_permitidas"
acl sites_permitidos url_regex -i "/etc/squid/sites_permitidos"
acl ip_liberado src "/etc/squid/ip_liberado"


############## ACL's MSN ########################
acl msn url_regex -i gateway.dll login.live.com loginnet.passport.com msn.com messenger.hotmail.com microsoft.com passport.net sqmserver.dll

http_access allow msn
#################################################

http_access allow rede_apto

http_access allow usuario_liberado
http_access allow conectividade
http_access allow conectividade1
http_access allow palavras_permitidas
http_access allow sites_permitidos
http_access deny downloads_bloqueados !usuario_liberado !sites_permitidos
http_access deny palavras_bloqueadas !usuario_liberado !sites_permitidos
http_access allow rede_cont

renato_pacheco
(usa Debian)

Enviado em 13/07/2011 - 10:39h

A ordem tá correta. O q o fs.schmidt disse faz sentido.

fs.schmidt
(usa CentOS)

Enviado em 13/07/2011 - 12:03h

Eu uso essa regra que citei em diversos ambientes e funciona perfeitamente, testei com todas as versões, até o msn 2011. Somente não mexi na regra ainda para liberar/bloquear o msn sem atingir o hotmail também...

marcelohbr
(usa CentOS)

Enviado em 14/07/2011 - 08:21h

Todas as tentativas foram em vao. Nada faz com que essa [*****] de MSN funcione perfeitamente.
Muito obrigado a vcs pela ajuda!

rodrigom
(usa Debian)

Enviado em 14/07/2011 - 08:43h

Cara, eu acredito que o problema ai seja essas linha que aparecem como DENIED, libera esses endereços que aparecem nessas linhas no seu squid, e caso nao de certo, coloca o arquivo por primeiro nas http_access allow...