####################################################################### #ARQUIVO DE CONFIGURAÃO DO PROXY ####################################################################### # -------------------------- http_port 192.168.X.XX:XXXX
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol= squid-2.5-ntlmssp auth_param ntlm use_ntlm_negotiate off auth_param ntlm children 10 auth_param basic program /usr/bin/ntlm_auth --helper-protocol= squid-2.5-basic auth_param basic children 5 auth_param basic realm Digite o USUARIO/SENHA auth_param basic credentialsttl 1 minute auth_param basic casesensitive off ####################################################################### cache_dir ufs /var/spool/squid 200 16 128 cache_access_log /var/log/squid/access.log squid cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log cache_swap_log /var/log/squid/swap.log # ------------------------------------------------------- mime_table /usr/share/squid/mime.conf # ------------------------------------------------------- hosts_file /etc/hosts unlinkd_program /usr/lib/squid/unlinkd # ACLS ####################################################################### # acl all src 0.0.0.0/0.0.0.0 # acl que solicita a autenticaç acl domainusers proxy_auth REQUIRED acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 # -------------------------------------------------------------------- # acl Safe_ports port 20 acl Safe_ports port 21 acl Safe_ports port 80 acl Safe_ports port 81 acl Safe_ports port 82 acl Safe_ports port 443 acl Safe_ports port 1024 acl Safe_ports port 2082 acl Safe_ports port 2086 acl Safe_ports port 3000 acl Safe_ports port 7618 acl Safe_ports port 8080 acl Safe_ports port 8090 acl Safe_ports port 8081 acl Safe_ports port 8082 acl Safe_ports port 8443 acl Safe_ports port 8801 acl Safe_ports port 9090 acl Safe_ports port 50000 acl Safe_ports port 61000 acl Safe_ports port 10000 acl SSL_ports port 443 acl SSL_ports port 8443 # acl CONNECT method CONNECT http_access allow manager localhost external_acl_type NT_global_group children=10 %LOGIN /usr/lib/squid/wbinfo_group.pl acl ProxyUsers external NT_global_group Grupo_Internet # HTTP_ACCESS # bloqueia o manager http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow ProxyUsers http_access allow domainusers http_access deny all # ICP_ACCESS icp_access allow all # MISS_ACCESS # DNS NAMESERVERS dns_nameservers 192.168.X.XX 192.168.X.XX # Administracao ###################################################################### # Email do administrador cache_mgr [EMAIL PROTECTED] # Linguagem dos erros error_directory /usr/share/squid/errors/Portuguese visible_hostname proxy.XXXXXX.com Em 07/12/07, Anderson Lopes <[EMAIL PROTECTED]> escreveu: > > posta ai o seu squid.conf > > On 12/6/07, João Júnior <[EMAIL PROTECTED]> wrote: > > > > Boa tarde a todos. > > > > bom, > > > > > > tenho um squid proxy funcionando redondo com autenticação no dominio NT > > via NTLM > > > > estou com um problema.. já procurei em um monte de lugar e ate mesmo na > > documentação do squid e do ntlm e não achei nada que possa me ajudar.. entao > > venho aqui à lista. > > > > ERRO: > > > > não consigo acessar sites que utilizam o JAVA... por exemplo.. banco do > > brasil ... na hora de abrir o teclado virtual para digitar a senha da > > conta.. aparece uma janela do java pedindo que eu entre com usuario, senha e > > dominio para autenticação.... não passa desta janela... > > > > visualizando o log squid, percebo que fica dandoTCP_DENIED no site > > www2.bancodobrasil.com.br:443 > > ... > > > > criei uma acl para liberar acessos à sites na porta 443 > > > > acl java url_regex -i :443 > > http_access allow java > > > > Feito isso funcionou... mas esta não é a solução mais segura... > > > > entao... vem a pergunta.. > > > > alguem ja passou por isso > > > > alguem pode ajudar > > > > > > Fico no aguardo de uma resposta > > > > > > obrigado > > > > ______________ > > Joao Junior > > > > > > -- > Anderson Raimundo > Analista de Suporte > +55 (71) 8178-5378 > Academy Connection ID : 5111570 > > >
