comentários: o msn ate onde eu sei precisa de um connect para funcionar na porta 1863. Meus logs:
grep 1863 /var/log/squid/access.log | head -n1 1140621576.518 1534 localhost TCP_MISS/200 413 CONNECT messenger.hotmail.com:1863 - DIRECT/65.54.239.210 - Ou seja, não adianta nada vc adicionar a porta 1863 na safe_ports, se vc so libera os connects nas ssl_ports sugestão1: modifique para http_access deny CONNECT !SSL_ports !Safe_ports (nao recomendo, mas funciona bem demais, escancara A ALMA do servidor pros seus clientes. sugestão2: crie uma acl só pro connect do msn acl Safe_ports_msn port 1863 #poha do msn http_access deny CONNECT !SSL_ports !Safe_ports_msn sugestão all: http_access deny !Safe_ports logo após. Tem certeza que vc quer que os seus usuarios queridos usando o squid acessem quaisquer portas de outras maquinas fora da sua rede usando o seu squid? [ ]s, henry ----- Original Message --- Em Qua 22 Fev 2006 18:18, zeca escreveu: > e simples tambem .. esta ai http_port 192.168.1.3 3128 hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY cache_mem 64 MB cache_swap_low 90 cache_swap_high 95 maximum_object_size 40960 KB cache_replacement_policy lru cache_dir ufs /usr/var/cache 5000 16 256 cache_access_log /usr/var/logs/access.log cache_log /usr/var/logs/cache.log cache_store_log /usr/var/logs/store.log mime_table /etc/squid/mime.conf log_mime_hdrs on pid_filename /usr/var/logs/squid.pid ftp_passive on auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours auth_param basic casesensitive off refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 0 20% 4320 acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl Safe_ports port 9090 # brma admi acl Safe_ports port 10001 # brma login acl Safe_ports port 3389 # Terminal service acl Safe_ports port 3390 # Terminal service acl Safe_ports port 1863 # msn acl CONNECT method CONNECT acl manager proto cache objetc acl rede_local src 192.168.1.0/255.255.255.0 acl porn url_regex "/etc/squid/porn" acl noporn url_regex "/etc/squid/noporn" http_access deny CONNECT !SSL_ports http_access allow noporn http_access deny porn http_access allow manager localhost http_access allow rede_local http_access deny all http_reply_access allow all icp_access allow all visible_hostname scorpiao.com.br httpd_accel_host virtual httpd_accel_port 80 httpd_accel_single_host on httpd_accel_with_proxy on httpd_accel_uses_host_header on forwarded_for on error_directory /usr/share/squid/errors/Portuguese coredump_dir /usr/var/cache ----- Original Message --- Enviar mensagem: [email protected] Assinar: [EMAIL PROTECTED] Cancelar assinatura: [EMAIL PROTECTED] Proprietário da lista: [EMAIL PROTECTED] http://www.penguintech.com.br Penguin Tech - Solucoes LINUX. Links do Yahoo! Grupos <*> Para visitar o site do seu grupo na web, acesse: http://br.groups.yahoo.com/group/squid-br/ <*> Para sair deste grupo, envie um e-mail para: [EMAIL PROTECTED] <*> O uso que você faz do Yahoo! Grupos está sujeito aos: http://br.yahoo.com/info/utos.html
