Problemas Com Grupos Squid

socr4t3s
(usa OpenSuSE)

Enviado em 01/01/2012 - 23:55h

Boa Noite Amigos,

Estou tentando implementar o squid aqui na empresa. Tudo estava indo bem ate que surgiu um "probleminha". Criei 3 listas de usuarios com acessos diferentes, todos as regras funcionam perfietamente para essas 3 listas de usuarios. Apos criar 4ª lista de usuario o squid simplismente ignora as regras que defino e assume uma regras qualquer. Por favor, abaixo meu squid.conf:

###################################################################

# Authentication
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
auth_param basic children 5
auth_param basic credentialsttl 1 hour
auth_param basic realm xavantes.fatal.com
auth_param basic casesensitive off

# Default Rules
http_port 3128
visible_hostname proxy
error_directory /usr/share/squid/errors/Portuguese

hierarchy_stoplist cgi-bin ?
cache_mem 64 MB
# cache_mgr webmaster@localhost
maximum_object_size_in_memory 64 KB
maximum_object_size 512 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 2048 16 256

refresh_pattern ^ftp: 15 20% 2280
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

access_log /var/log/squid/access.log

acl localhost src 127.0.0.1/32
acl rede0 src 192.168.0.0/24
acl rede1 src 192.168.1.0/24
acl all src 0.0.0.0/0.0.0.0
acl purge method PURGE
http_access allow purge localhost
http_access deny purge

acl Safe_ports port 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 80 # http
acl Safe_ports port 210 # wais
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 443 # gss-http
acl Safe_ports port 563 # nntps
acl Safe_ports port 591 # filemaker
acl Safe_ports port 631 # cups
acl Safe_ports port 777 # multiling http
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # swat
acl Safe_ports port 1025-65535 # unregistered ports
http_access deny !Safe_ports

acl CONNECT method CONNECT
acl SSL_ports port 443 # https
acl SSL_ports port 563 # nntps
acl SSL_ports port 873 # rsync
http_access deny connect !SSL_ports

# Filtered Groups
# Nivel 1
acl Nivel_1 proxy_auth "/etc/squid/grupos/Nivel1/nivel1"
acl nivel1_domains dstdomain "/etc/squid/grupos/Nivel1/domains"
acl nivel1_words url_regex -i "/etc/squid/grupos/Nivel1/words"
http_access allow nivel1_domains
http_access allow nivel1_words
http_access deny Nivel_1 !nivel1_domains
http_access deny Nivel_1 !nivel1_words

# Nivel 2
acl Nivel_2 proxy_auth "/etc/squid/grupos/Nivel2/nivel2"
acl nivel2_domains dstdomain "/etc/squid/grupos/Nivel2/domains"
acl nivel2_words url_regex -i "/etc/squid/grupos/Nivel2/words"
acl nivel2_extensions urlpath_regex -i "/etc/squid/grupos/Nivel2/extensions"
http_access deny nivel2_domains
http_access deny nivel2_words
http_access deny nivel2_extensions
http_access allow Nivel_2 !nivel2_domains
http_access allow Nivel_2 !nivel2_words
http_access allow Nivel_2 !nivel2_extensions

# Nivel 3
acl Nivel_3 proxy_auth "/etc/squid/grupos/Nivel3/nivel3"
acl nivel3_domains dstdomain "/etc/squid/grupos/Nivel3/domains"
acl nivel3_words url_regex -i "/etc/squid/grupos/Nivel3/words"
acl nivel3_extensions urlpath_regex -i "/etc/squid/grupos/Nivel3/extensions"
http_access deny nivel3_domains
http_access deny nivel3_words
http_access deny nivel2_extensions
http_access allow Nivel_3 !nivel3_domains
http_access allow Nivel_3 !nivel3_words
http_access allow Nivel_3 !nivel3_extensions

# HTTP Access Rules
http_access allow localhost
http_access allow rede0
http_access allow rede1
http_access deny all

################################################################################

Este squid.conf esta funcionando mais como disse acima quando a 4ª lista assuma as configuracoes de alguma lista. Minhas perguntas:

- Existe limite de lista de usuario?
- Se não existe, alguma boa alma pode me ajudar com meu squid.conf?

Obrigado Senhores e boa noite!

phrich
(usa Slackware)

Enviado em 03/01/2012 - 21:36h

Vamos lá, para o squid e inicie o mesmo da seguinte forma:

/etc/init.d/squid stop

squid -d 10

ou

/etc/init.d/squid -d 10

Ai poste os resultados aqui ok?