Re: [squid-br] Regex Libera ips - SOCORRO

Marceleza - Gmail Thu, 14 Sep 2006 10:46:08 -0700

Pessoal,

Alguem me ajude por favor...

Andreson,
Linhas assim ja existem no firewall
> $IPTABLES -t nat -A PREROUTING -i $LOCAL_IF -p tcp --dport 80 -j REDIRECT --to-port 8080
> $IPTABLES -t nat -A PREROUTING -i $LOCAL_IF -p udp --dport 80 -j REDIRECT --to-port 8080
Salvo engano, sua sugestao se repete na linha com "dport www" e com "dport 80".

Valeu pela força, mas meu squid ainda nao ta funcionando.

[EMAIL PROTECTED] escreveu:

/sbin/iptables -t nat -A PREROUTING -p TCP -s sua_rede --dport www -j REDIRECT
--to-port 8080
/sbin/iptables -t nat -A PREROUTING -p TCP -s sua_rede --dport 8080 -j REDIRECT
--to-port 8080
/sbin/iptables -t nat -A PREROUTING -p TCP -s sua_rede --dport 80 -j REDIRECT
--to-port 8080

Tente essa ai.

Citando Marceleza - Gmail <[EMAIL PROTECTED]>:

> Ai vai
>
> INTERNET=0/0
> LOCALHOST=127.0.0.1
> LOCALNET=10.0.0.0/22
>
>
> IPTABLES=/sbin/iptables
> PUBLIC_IF=eth0
> LOCAL_IF=eth1
>
>
> $IPTABLES -F
> $IPTABLES -t nat -F
> $IPTABLES -t filter -F
> $IPTABLES -t mangle -F
> # ****************** #
> # Ativa o roteamento
> # ****************** #
> echo 1 > /proc/sys/net/ipv4/ip_forward
>
> # ********************************* #
> # Redirecionamento do PROXY #
> # ********************************* #
> # Redireciona HTTP para mÃÂ¡ina
> $IPTABLES -t nat -A PREROUTING -i $LOCAL_IF -p tcp --dport 80 -j
> REDIRECT --to-port 8080
> $IPTABLES -t nat -A PREROUTING -i $LOCAL_IF -p udp --dport 80 -j
> REDIRECT --to-port 8080
>
> $IPTABLES -A FORWARD -s $INTERNET -d $INTERNET -j ACCEPT
>
> Bem, isso eh a parte que acho que interessa. Caso queria ver mais, por
> favor solicite .
>
> Valeu mesmo
>
> [EMAIL PROTECTED] escreveu:
> > Coloque suas regras de firewall ai cara para darmos uma olhada no que
> > esta fazendo.
> >
> > Citando Marceleza - Gmail <[EMAIL PROTECTED]>:
> >
> > > Pessoal,
> > >
> > > Meu proxy transparente nao esta funcionando, preciso de ajuda por favor.
> > >
> > > Transcrevo abaixo o squid.conf. Obrigado.
> > >
> > > ################## INICIO DO ARQUIVO
> > > visible_hostname xxx.xxx.xxx.xx
> > > http_port 8080
> > > icp_port 0
> > > acl QUERY urlpath_regex cgi-bin \?
> > > no_cache deny QUERY
> > > no_cache allow QUERY
> > > cache_mem 512 MB
> > > maximum_object_size_in_memory 128 KB
> > > maximum_object_size 1024 MB
> > > minimum_object_size 0 KB
> > > cache_swap_low 90
> > > cache_swap_high 95
> > > cache_dir ufs /var/spool/squid 2048 16 256
> > > cache_access_log /var/log/squid/access.log
> > > #cache_access_log /dev/null
> > > dns_nameservers 200.255.125.211
> > >
> > >
> > > #proxy transparente
> > > httpd_accel_host virtual
> > > httpd_accel_port 80
> > > httpd_accel_with_proxy on
> > > httpd_accel_uses_host_header on
> > >
> > > acl localnet src 10.0.0.0/255.255.252.0
> > > acl localhost src 127.0.0.1/255.255.255.255
> > >
> > >
> > > acl Safe_ports port 80 443 210 119 70 20 21 1863 1025-65535
> > > acl CONNECT method CONNECT
> > > acl all src 0.0.0.0/0.0.0.0
> > > acl ips_acessofull url_regex -i "/etc/squid/liberados/ips_acessofull.txt
> > > acl proxygw url_regex -i "/etc/squid/bloqueados/proxy/domains.txt"
> > > acl blockedsites url_regex -i "/etc/squid/bloqueados/block.txt"
> > > acl unblockedsites url_regex -i "/etc/squid/bloqueados/unblock.txt"
> > > acl malware_block_list url_regex -i
> > "/etc/squid/mbl/malware_block_list.txt"
> > >
> > >
> > >
> > > http_access allow localnet
> > > http_access allow localhost
> > > http_access allow ips_acessofull
> > > http_access deny malware_block_list
> > > http_access deny proxygw
> > > http_access deny blockedsites !unblockedsites
> > > http_access deny !Safe_ports
> > > http_access deny CONNECT
> > >
> > >
> > >
> > >
> > > ################## FIM DO ARQUIVO
> > >
> > > Marceleza - Gmail escreveu:
> > > > E ae Drops.
> > > >
> > > > Rapaz, agora nao bloqueio orkut, que esta na minha lista de malwares.
> > > >
> > > > Vou reenviar pra vc dar uma olhada por favor.
> > > >
> > > > Obrigado.
> > > >
> > > >
> > > >
> > > > acl localnet src 10.0.0.0/255.255.252.0
> > > > acl localhost src 127.0.0.1/255.255.255.255
> > > >
> > > >
> > > > acl Safe_ports port 80 443 210 119 70 20 21 1863 1025-65535
> > > > acl CONNECT method CONNECT
> > > > acl all src 0.0.0.0/0.0.0.0
> > > > acl ips_acessofull url_regex -i
> > "/etc/squid/liberados/ips_acessofull.txt
> > > > acl proxygw url_regex -i "/etc/squid/bloqueados/proxy/domains.txt"
> > > > acl blockedsites url_regex -i "/etc/squid/bloqueados/block.txt"
> > > > acl unblockedsites url_regex -i "/etc/squid/bloqueados/unblock.txt"
> > > > acl malware_block_list url_regex -i
> > > > "/etc/squid/mbl/malware_block_list.txt"
> > > >
> > > >
> > > > http_access allow localnet
> > > > http_access allow localhost
> > > > http_access allow ips_acessofull
> > > > http_access deny proxygw
> > > > http_access deny malware_block_list
> > > > http_access deny blockedsites !unblockedsites
> > > > http_access deny !Safe_ports
> > > > http_access deny CONNECT
> > > >
> > > >
> > > > DropsDef escreveu:
> > > >> Marceleza - Gmail wrote:
> > > >> > Pessoal,
> > > >> >
> > > >> > A regra abaixo intitulada IPS_ACESSOFULL nao esta funcionando.
> > Alguem
> > > >> > saberia identificar o motivo?
> > > >> >
> > > >> > acl proxygw url_regex -i "/etc/squid/bloqueados/proxy/domains.txt"
> > > >> > acl ips_acessofull url_regex -i
> > > >> "/etc/squid/liberados/ips_acessofull.txt
> > > >> > acl blockedsites url_regex -i "/etc/squid/bloqueados/block.txt"
> > > >> > acl unblockedsites url_regex -i "/etc/squid/bloqueados/unblock.txt"
> > > >> > acl malware_block_list url_regex -i
> > > >> "/etc/squid/mbl/malware_block_list.txt"
> > > >> >
> > > >> > http_access deny proxygw
> > > >> > http_access deny malware_block_list
> > > >> > http_access deny blockedsites !unblockedsites
> > > >> > http_access deny !Safe_ports
> > > >> > http_access allow localnet
> > > >> > http_access allow localhost
> > > >> > http_access allow ips_acessofull
> > > >> > http_access deny CONNECT
> > > >> >
> > > >> >
> > > >> A ordem dos tratores alteram o viaduto.
> > > >>
> > > >> As permissões necessitam vir antes das negações na diretiva
> > http_access.
> > > >> Ex.:
> > > >>
> > > >> http_access allow localnet
> > > >> http_access allow localhost
> > > >> http_access allow ips_acessofull
> > > >> http_access deny proxygw
> > > >> http_access deny malware_block_list
> > > >> http_access deny blockedsites !unblockedsites
> > > >> http_access deny !Safe_ports
> > > >> http_access deny CONNECT
> > > >>
> > > >> --
> > > >>
> > > >> DropsDef
> > > >> http://dropsdef.blogspot.com
> > > >> msn: [EMAIL PROTECTED]
> > > >> skype: dropsdef
> > > >>
> > > >>
> > > >
> > > >
> > >
> > >
> > >
> >
> >
> >
> >
>
>
>

__._,_.___

Enviar mensagem: [email protected] Assinar: [EMAIL PROTECTED] Cancelar assinatura: [EMAIL PROTECTED] Proprietário da lista: [EMAIL PROTECTED]

Yahoo! Grupos, um serviço oferecido por:

Links do Yahoo! Grupos

Para visitar o site do seu grupo na web, acesse:
http://br.groups.yahoo.com/group/squid-br/
Para sair deste grupo, envie um e-mail para:
[EMAIL PROTECTED]
O uso que você faz do Yahoo! Grupos está sujeito aos Termos do Serviço do Yahoo!.

__,_._,___

Re: [squid-br] Regex Libera ips - SOCORRO

Responder a