Re: FTP no Squid

[Paulo Ricardo <pauloric@contato.com.br>]

Em Qui, 2004-10-14 às 08:38, Kleyton Marques Faria escreveu:
> Estou tentando acessar sites FTP pelas minhas máquinas clientes, onde
> tenho o squid configurado (Abaixo), mas o Internet Explorer não
> aceita, diz q a conexao foi recusada e outros erros, gostaria de saber
> se alguém pode me ajudar.

sim 
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> 
> ______________________________________________________________________
>  http_port 3128
> hierarchy_stoplist cgi-bin ?
> acl QUERY urlpath_regex cgi-bin \?
> no_cache deny QUERY
>  cache_mem 10 MB
>  cache_swap_low 90
>  cache_swap_high 95
>  maximum_object_size 61440 KB
>  cache_dir ufs /var/spool/squid 2048 16 256
>  cache_access_log /var/log/squid/access.log
>  cache_log /var/log/squid/cache.log
>  emulate_httpd_log on
> acl all src 0.0.0.0/0.0.0.0
>  acl localnet src 192.168.1.0 
>  acl msoft_msn src 192.168.1.0/24
>  acl msn dst 207.46.104.20 207.46.110.0/24
>  acl liberar_ip src 192.168.1.202 192.168.1.201 192.168.1.80 192.168.1.10 192.168.1.66 192.168.1.250 192.168.1.68
>  acl site_bloqueado url_regex -i "/var/log/squid/acl/site_bloqueado"
>  acl site_liberado url_regex -i "/var/log/squid/acl/site_liberado"
>  acl dominio_bloqueado dstdomain "/var/log/squid/acl/dominio_bloqueado"
>  acl dominio_liberado dstdomain "/var/log/squid/acl/dominio_liberado"
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> acl SSL_ports port 443 563
> acl Safe_ports port 80		# http
> acl Safe_ports port 21		# ftp
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> acl Safe_ports port 443 563	# https, snews
> acl Safe_ports port 70		# gopher
> acl Safe_ports port 210		# wais
> acl Safe_ports port 1025-65535	# unregistered ports
> acl Safe_ports port 280		# http-mgmt
> acl Safe_ports port 488		# gss-http
> acl Safe_ports port 591		# filemaker
> acl Safe_ports port 777		# multiling http
> acl Safe_ports port 901		# SWAT
> acl purge method PURGE
> acl CONNECT method CONNECT
>  http_access deny site_bloqueado !site_liberado
>  http_access deny dominio_bloqueado !dominio_liberado
>  http_access allow msoft_msn msn
>  http_access allow localnet dominio_liberado
>  http_access allow liberar_ip

Vc criou as acl Safe port mas não as está usando...hehehe comeu as
aclś????

coloque aqui antes do deny all
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports


estas acls e http_access são padrão do arquivo de configuração do squid.
NÃO AS RETIRE a não ser que vc saiba o que está fazendo....80)


ats




>  http_access deny all
> icp_access allow all
>  cache_mgr kleyton@uai.com.br
>  httpd_accel_host virtual
>  httpd_accel_port 80
>  httpd_accel_with_proxy on
>  httpd_accel_uses_host_header on
-- 
Paulo Ricardo Bruck - consultor
Contato Global Solutions
tel 011 5031-4932  fone/fax 011 5034-1732  cel 011 9235-4327