10:58 a.m.
Estoy teniendo problemas con esto necesito que alguien me revise el orden la
las acl y la sintaxis de las mismas, por favor estoy volviéndome loco con
respecto a este tema. Aquí les dejo mis acl, Esto es Squid 5.0.2. las cosas
que están repetidas y comentadas he sido yo tratando de dar pie con bolas.
#Squid ACL
acl localhost src 172.16.1.220/32
acl localnet src 172.16.0.0/22
acl SSL_ports port 443 # HTTPS
acl SSL_ports port 563 # SNEWS
acl SSL_ports port 873 # RSYNC
acl Safe_ports port 21 # FTP
acl Safe_ports port 22 # SSH
acl Safe_ports port 25 # SMTP
acl Safe_ports port 70 # GOPHER
acl Safe_ports port 80 # HTTP
acl Safe_ports port 110 # POP3
acl Safe_ports port 210 # WAIS
acl Safe_ports port 280 # HTTP-MGMT
acl Safe_ports port 443 # HTTPS
acl Safe_ports port 488 # GSS-HTTP
acl Safe_ports port 591 # FILEMAKER
acl Safe_ports port 631 # CUPS
acl Safe_ports port 777 # MULTILING HTTP
acl Safe_ports port 873 # RSYNC
acl Safe_ports port 901 # SWAT
acl Safe_ports port 5222 # JABBER
acl Safe_ports port 1025-65535 # UNREGISTERED PORTS
acl Safe_ports port 53 # DNS
acl Safe_ports port 7071 # Zimbra WebAdmin
acl Safe_ports port 9090 # Jabber Admin
acl Safe_ports port 123 # NTP
## Methods allowed
acl Safe_method method CONNECT GET HEAD POST
http_access deny !Safe_method
## Protocols allowed
#acl Safe_proto proto HTTP SSL
#http_access deny !Safe_proto
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
# Only allow cachemgr access from localhost
http_access allow localhost localnet
# Time limitations[from 830am to 430pm, weekly working time]
acl workingtime time MTWHF 08:30-16:30
acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
http_access deny workingtime not_work_domains !Nav_full !Rsocial
## Autenticacion
acl pc-int src "/etc/squid/pcinternet/pc"
acl cuba dstdomain .cu
http_access allow Squid_Login pc-int Nav_Int
http_access allow Squid_Login cuba localnet
# Only 20 connection threads per ip[EXAMPLE but works]
acl limitreq maxconn 20
http_access deny limitreq !Nav_full
# Denegar Videos
acl deny_rep_mime_flashvideo rep_mime_type video/flv
#EVITAR NAVEGACION POR IP
acl NAVEGACION_IP dstdom_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$
# Limite en cantidad de veces q puede estar uno logueado
acl max-maq-por-usuario max_user_ip -s 1
#EVITAR BURLAS A GOOGLE
acl mocks_gl url_regex google.com[\.[A-Z][a-z]]/gwt
acl mocks_gl url_regex google.com.cu/gwt
acl mocks_gl url_regex google.com.cu/xhtml
acl mocks_gl url_regex google.com.cu/m
acl mocks_gl url_regex google.com.cu/pda
# Whitelisting sites
acl whitelist dstdomain "/etc/squid/allowed/whitelist"
# Allowing whitelisting
http_access allow whitelist
# Blacklisted stuff Porno
acl blacklist_domain_porn dstdomain "/etc/squid/porn/domains"
acl blacklist_urls_porn url_regex "/etc/squid/porn/regularexpressions"
# Politics related
acl blacklist_domain_politic dstdomain "/etc/squid/politic/domains"
# Chat
acl blacklist_domain_chat dstdomain "/etc/squid/chat/domains"
# Anonymous proxies
acl blacklist_domain_proxy dstdomain "/etc/squid/proxy/domains"
# Weird domains
acl blacklist_domain_suspect dstdomain "/etc/squid/suspect/domains"
# ADS
acl ads_url url_regex "/etc/squid/ads/regularexpressions"
acl ads_domain dstdomain "/etc/squid/ads/domains"
# Blacklisted Socialnet
acl blacklist_domain_socialnet dstdomain "/etc/squid/socialnet/domains"
acl blacklist_urls_socialnet url_regex "/etc/squid/socialnet/urls"
# Blacklisted Music
acl blacklist_domain_music dstdomain "/etc/squid/music/domains"
acl blacklist_urls_music url_regex "/etc/squid/music/urls"
# Blacklisted Webmail
acl blacklist_domain_webmail dstdomain "/etc/squid/webmail/domains"
acl blacklist_urls_webmail url_regex "/etc/squid/webmail/urls"
# Denying blacklisted
http_access deny max-maq-por-usuario
http_access deny mocks_gl
http_access deny NAVEGACION_IP !Nav_full
http_access deny blacklist_domain_porn
http_access deny blacklist_urls_porn
http_access deny blacklist_domain_politic
http_access deny blacklist_domain_chat !Nav_full
http_access deny blacklist_domain_proxy
http_access deny blacklist_domain_suspect
http_access deny ads_url
http_access deny ads_domain
http_access deny blacklist_domain_socialnet !Nav_full !Rsocial
http_access deny blacklist_urls_socialnet !Nav_full !Rsocial
http_access deny blacklist_domain_music !Nav_full
http_access deny blacklist_urls_music !Nav_full
http_access deny blacklist_domain_webmail !Nav_full
http_access deny blacklist_urls_webmail !Nav_full
http_reply_access deny deny_rep_mime_flashvideo !Nav_full
# Time limitations[from 830am to 430pm, weekly working time]
#acl workingtime time MTWHF 08:30-16:30
#acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
#http_access deny workingtime not_work_domains !Nav_full !Rsocial
#################################
#http_access allow Squid_Login pc-int Nav_Int
#http_access allow Squid_Login cuba localnet
#http_access deny !Squid_Login
#################################
# Denegar Todo
http_access deny all
icp_access deny all
========================
Josvany Hernández Ortega.
Administrador de Red.
Telf. +53 7 682 3279
Pizz. +53 7 682 9563 al 70
Ext. 108
<mailto:josvanyho@centis.edu.cu> josvanyho(a)centis.edu.cu
========================
12:04 p.m.
Dejame hacerte una pregunta esto es todo el conf de tu squid??? te
pregunto por que no veo ninguna acl para la autenticacion y supongo que
tengas conexion directa
El 1/7/20 a las 10:58, Josvany Hernández Ortega escribió:
Estoy teniendo problemas con esto necesito que alguien me revise el
orden la las acl y la sintaxis de las mismas, por favor estoy
volviéndome loco con respecto a este tema. Aquí les dejo mis acl, Esto
es Squid 5.0.2. las cosas que están repetidas y comentadas he sido yo
tratando de dar pie con bolas.
#Squid ACL
acl localhost src 172.16.1.220/32
acl localnet src 172.16.0.0/22
acl SSL_ports port 443 # HTTPS
acl SSL_ports port 563 # SNEWS
acl SSL_ports port 873 # RSYNC
acl Safe_ports port 21 # FTP
acl Safe_ports port 22 # SSH
acl Safe_ports port 25 # SMTP
acl Safe_ports port 70 # GOPHER
acl Safe_ports port 80 # HTTP
acl Safe_ports port 110 # POP3
acl Safe_ports port 210 # WAIS
acl Safe_ports port 280 # HTTP-MGMT
acl Safe_ports port 443 # HTTPS
acl Safe_ports port 488 # GSS-HTTP
acl Safe_ports port 591 # FILEMAKER
acl Safe_ports port 631 # CUPS
acl Safe_ports port 777 # MULTILING HTTP
acl Safe_ports port 873 # RSYNC
acl Safe_ports port 901 # SWAT
acl Safe_ports port 5222 # JABBER
acl Safe_ports port 1025-65535 # UNREGISTERED PORTS
acl Safe_ports port 53 # DNS
acl Safe_ports port 7071 # Zimbra WebAdmin
acl Safe_ports port 9090 # Jabber Admin
acl Safe_ports port 123 # NTP
## Methods allowed
acl Safe_method method CONNECT GET HEAD POST
http_access deny !Safe_method
## Protocols allowed
#acl Safe_proto proto HTTP SSL
#http_access deny !Safe_proto
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
# Only allow cachemgr access from localhost
http_access allow localhost localnet
# Time limitations[from 830am to 430pm, weekly working time]
acl workingtime time MTWHF 08:30-16:30
acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
http_access deny workingtime not_work_domains !Nav_full !Rsocial
## Autenticacion
acl pc-int src "/etc/squid/pcinternet/pc"
acl cuba dstdomain .cu
http_access allow Squid_Login pc-int Nav_Int
http_access allow Squid_Login cuba localnet
# Only 20 connection threads per ip[EXAMPLE but works]
acl limitreq maxconn 20
http_access deny limitreq !Nav_full
# Denegar Videos
acl deny_rep_mime_flashvideo rep_mime_type video/flv
#EVITAR NAVEGACION POR IP
acl NAVEGACION_IP dstdom_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$
# Limite en cantidad de veces q puede estar uno logueado
acl max-maq-por-usuario max_user_ip -s 1
#EVITAR BURLAS A GOOGLE
acl mocks_gl url_regex google.com[\.[A-Z][a-z]]/gwt
acl mocks_gl url_regex google.com.cu/gwt
acl mocks_gl url_regex google.com.cu/xhtml
acl mocks_gl url_regex google.com.cu/m
acl mocks_gl url_regex google.com.cu/pda
# Whitelisting sites
acl whitelist dstdomain "/etc/squid/allowed/whitelist"
# Allowing whitelisting
http_access allow whitelist
# Blacklisted stuff Porno
acl blacklist_domain_porn dstdomain "/etc/squid/porn/domains"
acl blacklist_urls_porn url_regex "/etc/squid/porn/regularexpressions"
# Politics related
acl blacklist_domain_politic dstdomain "/etc/squid/politic/domains"
# Chat
acl blacklist_domain_chat dstdomain "/etc/squid/chat/domains"
# Anonymous proxies
acl blacklist_domain_proxy dstdomain "/etc/squid/proxy/domains"
# Weird domains
acl blacklist_domain_suspect dstdomain "/etc/squid/suspect/domains"
# ADS
acl ads_url url_regex "/etc/squid/ads/regularexpressions"
acl ads_domain dstdomain "/etc/squid/ads/domains"
# Blacklisted Socialnet
acl blacklist_domain_socialnet dstdomain "/etc/squid/socialnet/domains"
acl blacklist_urls_socialnet url_regex "/etc/squid/socialnet/urls"
# Blacklisted Music
acl blacklist_domain_music dstdomain "/etc/squid/music/domains"
acl blacklist_urls_music url_regex "/etc/squid/music/urls"
# Blacklisted Webmail
acl blacklist_domain_webmail dstdomain "/etc/squid/webmail/domains"
acl blacklist_urls_webmail url_regex "/etc/squid/webmail/urls"
# Denying blacklisted
http_access deny max-maq-por-usuario
http_access deny mocks_gl
http_access deny NAVEGACION_IP !Nav_full
http_access deny blacklist_domain_porn
http_access deny blacklist_urls_porn
http_access deny blacklist_domain_politic
http_access deny blacklist_domain_chat !Nav_full
http_access deny blacklist_domain_proxy
http_access deny blacklist_domain_suspect
http_access deny ads_url
http_access deny ads_domain
http_access deny blacklist_domain_socialnet !Nav_full !Rsocial
http_access deny blacklist_urls_socialnet !Nav_full !Rsocial
http_access deny blacklist_domain_music !Nav_full
http_access deny blacklist_urls_music !Nav_full
http_access deny blacklist_domain_webmail !Nav_full
http_access deny blacklist_urls_webmail !Nav_full
http_reply_access deny deny_rep_mime_flashvideo !Nav_full
# Time limitations[from 830am to 430pm, weekly working time]
#acl workingtime time MTWHF 08:30-16:30
#acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
#http_access deny workingtime not_work_domains !Nav_full !Rsocial
#################################
#http_access allow Squid_Login pc-int Nav_Int
#http_access allow Squid_Login cuba localnet
#http_access deny !Squid_Login
#################################
# Denegar Todo
http_access deny all
icp_access deny all
========================
Josvany Hernández Ortega.
Administrador de Red.
Telf. +53 7 682 3279
Pizz. +53 7 682 9563 al 70
Ext. 108
josvanyho(a)centis.edu.cu <mailto:josvanyho@centis.edu.cu>
========================
_______________________________________________
Gutl-l mailing list -- gutl-l(a)listas.jovenclub.cu
To unsubscribe send an email to gutl-l-leave(a)listas.jovenclub.cu
12:14 p.m.
Aquí va completo.
========================
Josvany Hernández Ortega.
Administrador de Red.
Telf. +53 7 682 3279
Pizz. +53 7 682 9563 al 70
Ext. 108
<mailto:josvanyho@centis.edu.cu> josvanyho(a)centis.edu.cu
========================
De: Micky <maikel.manuel(a)ipi.cm.rimed.cu>
Enviado el: miércoles, 1 de julio de 2020 12:04
Para: gutl-l(a)listas.jovenclub.cu
Asunto: [Gutl-l] Re: Squid Urgente
Dejame hacerte una pregunta esto es todo el conf de tu squid??? te pregunto
por que no veo ninguna acl para la autenticacion y supongo que tengas
conexion directa
El 1/7/20 a las 10:58, Josvany Hernández Ortega escribió:
Estoy teniendo problemas con esto necesito que alguien me revise el orden la
las acl y la sintaxis de las mismas, por favor estoy volviéndome loco con
respecto a este tema. Aquí les dejo mis acl, Esto es Squid 5.0.2. las cosas
que están repetidas y comentadas he sido yo tratando de dar pie con bolas.
#Squid ACL
acl localhost src 172.16.1.220/32
acl localnet src 172.16.0.0/22
acl SSL_ports port 443 # HTTPS
acl SSL_ports port 563 # SNEWS
acl SSL_ports port 873 # RSYNC
acl Safe_ports port 21 # FTP
acl Safe_ports port 22 # SSH
acl Safe_ports port 25 # SMTP
acl Safe_ports port 70 # GOPHER
acl Safe_ports port 80 # HTTP
acl Safe_ports port 110 # POP3
acl Safe_ports port 210 # WAIS
acl Safe_ports port 280 # HTTP-MGMT
acl Safe_ports port 443 # HTTPS
acl Safe_ports port 488 # GSS-HTTP
acl Safe_ports port 591 # FILEMAKER
acl Safe_ports port 631 # CUPS
acl Safe_ports port 777 # MULTILING HTTP
acl Safe_ports port 873 # RSYNC
acl Safe_ports port 901 # SWAT
acl Safe_ports port 5222 # JABBER
acl Safe_ports port 1025-65535 # UNREGISTERED PORTS
acl Safe_ports port 53 # DNS
acl Safe_ports port 7071 # Zimbra WebAdmin
acl Safe_ports port 9090 # Jabber Admin
acl Safe_ports port 123 # NTP
## Methods allowed
acl Safe_method method CONNECT GET HEAD POST
http_access deny !Safe_method
## Protocols allowed
#acl Safe_proto proto HTTP SSL
#http_access deny !Safe_proto
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
# Only allow cachemgr access from localhost
http_access allow localhost localnet
# Time limitations[from 830am to 430pm, weekly working time]
acl workingtime time MTWHF 08:30-16:30
acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
http_access deny workingtime not_work_domains !Nav_full !Rsocial
## Autenticacion
acl pc-int src "/etc/squid/pcinternet/pc"
acl cuba dstdomain .cu
http_access allow Squid_Login pc-int Nav_Int
http_access allow Squid_Login cuba localnet
# Only 20 connection threads per ip[EXAMPLE but works]
acl limitreq maxconn 20
http_access deny limitreq !Nav_full
# Denegar Videos
acl deny_rep_mime_flashvideo rep_mime_type video/flv
#EVITAR NAVEGACION POR IP
acl NAVEGACION_IP dstdom_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$
# Limite en cantidad de veces q puede estar uno logueado
acl max-maq-por-usuario max_user_ip -s 1
#EVITAR BURLAS A GOOGLE
acl mocks_gl url_regex google.com[\.[A-Z][a-z]]/gwt
acl mocks_gl url_regex google.com.cu/gwt
acl mocks_gl url_regex google.com.cu/xhtml
acl mocks_gl url_regex google.com.cu/m
acl mocks_gl url_regex google.com.cu/pda
# Whitelisting sites
acl whitelist dstdomain "/etc/squid/allowed/whitelist"
# Allowing whitelisting
http_access allow whitelist
# Blacklisted stuff Porno
acl blacklist_domain_porn dstdomain "/etc/squid/porn/domains"
acl blacklist_urls_porn url_regex "/etc/squid/porn/regularexpressions"
# Politics related
acl blacklist_domain_politic dstdomain "/etc/squid/politic/domains"
# Chat
acl blacklist_domain_chat dstdomain "/etc/squid/chat/domains"
# Anonymous proxies
acl blacklist_domain_proxy dstdomain "/etc/squid/proxy/domains"
# Weird domains
acl blacklist_domain_suspect dstdomain "/etc/squid/suspect/domains"
# ADS
acl ads_url url_regex "/etc/squid/ads/regularexpressions"
acl ads_domain dstdomain "/etc/squid/ads/domains"
# Blacklisted Socialnet
acl blacklist_domain_socialnet dstdomain "/etc/squid/socialnet/domains"
acl blacklist_urls_socialnet url_regex "/etc/squid/socialnet/urls"
# Blacklisted Music
acl blacklist_domain_music dstdomain "/etc/squid/music/domains"
acl blacklist_urls_music url_regex "/etc/squid/music/urls"
# Blacklisted Webmail
acl blacklist_domain_webmail dstdomain "/etc/squid/webmail/domains"
acl blacklist_urls_webmail url_regex "/etc/squid/webmail/urls"
# Denying blacklisted
http_access deny max-maq-por-usuario
http_access deny mocks_gl
http_access deny NAVEGACION_IP !Nav_full
http_access deny blacklist_domain_porn
http_access deny blacklist_urls_porn
http_access deny blacklist_domain_politic
http_access deny blacklist_domain_chat !Nav_full
http_access deny blacklist_domain_proxy
http_access deny blacklist_domain_suspect
http_access deny ads_url
http_access deny ads_domain
http_access deny blacklist_domain_socialnet !Nav_full !Rsocial
http_access deny blacklist_urls_socialnet !Nav_full !Rsocial
http_access deny blacklist_domain_music !Nav_full
http_access deny blacklist_urls_music !Nav_full
http_access deny blacklist_domain_webmail !Nav_full
http_access deny blacklist_urls_webmail !Nav_full
http_reply_access deny deny_rep_mime_flashvideo !Nav_full
# Time limitations[from 830am to 430pm, weekly working time]
#acl workingtime time MTWHF 08:30-16:30
#acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
#http_access deny workingtime not_work_domains !Nav_full !Rsocial
#################################
#http_access allow Squid_Login pc-int Nav_Int
#http_access allow Squid_Login cuba localnet
#http_access deny !Squid_Login
#################################
# Denegar Todo
http_access deny all
icp_access deny all
========================
Josvany Hernández Ortega.
Administrador de Red.
Telf. +53 7 682 3279
Pizz. +53 7 682 9563 al 70
Ext. 108
<mailto:josvanyho@centis.edu.cu> josvanyho(a)centis.edu.cu
========================
_______________________________________________
Gutl-l mailing list -- gutl-l(a)listas.jovenclub.cu
<mailto:gutl-l@listas.jovenclub.cu>
To unsubscribe send an email to gutl-l-leave(a)listas.jovenclub.cu
<mailto:gutl-l-leave@listas.jovenclub.cu>
1 p.m.
El 01/07/2020 a las 12:14, Josvany Hernández Ortega escribió:
Aquí va completo.
========================
Josvany Hernández Ortega.
Administrador de Red.
Telf. +53 7 682 3279
Pizz. +53 7 682 9563 al 70
Ext. 108
josvanyho(a)centis.edu.cu <mailto:josvanyho@centis.edu.cu>
========================
*De:*Micky <maikel.manuel(a)ipi.cm.rimed.cu>
*Enviado el:* miércoles, 1 de julio de 2020 12:04
*Para:* gutl-l(a)listas.jovenclub.cu
*Asunto:* [Gutl-l] Re: Squid Urgente
Dejame hacerte una pregunta esto es todo el conf de tu squid??? te
pregunto por que no veo ninguna acl para la autenticacion y supongo
que tengas conexion directa
El 1/7/20 a las 10:58, Josvany Hernández Ortega escribió:
Estoy teniendo problemas con esto necesito que alguien me revise
el orden la las acl y la sintaxis de las mismas, por favor estoy
volviéndome loco con respecto a este tema. Aquí les dejo mis acl,
Esto es Squid 5.0.2. las cosas que están repetidas y comentadas
he sido yo tratando de dar pie con bolas.
#Squid ACL
acl localhost src 172.16.1.220/32
acl localnet src 172.16.0.0/22
acl SSL_ports port 443 # HTTPS
acl SSL_ports port 563 # SNEWS
acl SSL_ports port 873 # RSYNC
acl Safe_ports port 21 # FTP
acl Safe_ports port 22 # SSH
acl Safe_ports port 25 # SMTP
acl Safe_ports port 70 # GOPHER
acl Safe_ports port 80 # HTTP
acl Safe_ports port 110 # POP3
acl Safe_ports port 210 # WAIS
acl Safe_ports port 280 # HTTP-MGMT
acl Safe_ports port 443 # HTTPS
acl Safe_ports port 488 # GSS-HTTP
acl Safe_ports port 591 # FILEMAKER
acl Safe_ports port 631 # CUPS
acl Safe_ports port 777 # MULTILING HTTP
acl Safe_ports port 873 # RSYNC
acl Safe_ports port 901 # SWAT
acl Safe_ports port 5222 # JABBER
acl Safe_ports port 1025-65535 # UNREGISTERED PORTS
acl Safe_ports port 53 # DNS
acl Safe_ports port 7071 # Zimbra WebAdmin
acl Safe_ports port 9090 # Jabber Admin
acl Safe_ports port 123 # NTP
## Methods allowed
acl Safe_method method CONNECT GET HEAD POST
http_access deny !Safe_method
## Protocols allowed
#acl Safe_proto proto HTTP SSL
#http_access deny !Safe_proto
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
# Only allow cachemgr access from localhost
http_access allow localhost localnet
# Time limitations[from 830am to 430pm, weekly working time]
acl workingtime time MTWHF 08:30-16:30
acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
http_access deny workingtime not_work_domains !Nav_full !Rsocial
## Autenticacion
acl pc-int src "/etc/squid/pcinternet/pc"
acl cuba dstdomain .cu
http_access allow Squid_Login pc-int Nav_Int
http_access allow Squid_Login cuba localnet
# Only 20 connection threads per ip[EXAMPLE but works]
acl limitreq maxconn 20
http_access deny limitreq !Nav_full
# Denegar Videos
acl deny_rep_mime_flashvideo rep_mime_type video/flv
#EVITAR NAVEGACION POR IP
acl NAVEGACION_IP dstdom_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$
# Limite en cantidad de veces q puede estar uno logueado
acl max-maq-por-usuario max_user_ip -s 1
#EVITAR BURLAS A GOOGLE
acl mocks_gl url_regex google.com[\.[A-Z][a-z]]/gwt
acl mocks_gl url_regex google.com.cu/gwt
acl mocks_gl url_regex google.com.cu/xhtml
acl mocks_gl url_regex google.com.cu/m
acl mocks_gl url_regex google.com.cu/pda
# Whitelisting sites
acl whitelist dstdomain "/etc/squid/allowed/whitelist"
# Allowing whitelisting
http_access allow whitelist
# Blacklisted stuff Porno
acl blacklist_domain_porn dstdomain "/etc/squid/porn/domains"
acl blacklist_urls_porn url_regex "/etc/squid/porn/regularexpressions"
# Politics related
acl blacklist_domain_politic dstdomain "/etc/squid/politic/domains"
# Chat
acl blacklist_domain_chat dstdomain "/etc/squid/chat/domains"
# Anonymous proxies
acl blacklist_domain_proxy dstdomain "/etc/squid/proxy/domains"
# Weird domains
acl blacklist_domain_suspect dstdomain "/etc/squid/suspect/domains"
# ADS
acl ads_url url_regex "/etc/squid/ads/regularexpressions"
acl ads_domain dstdomain "/etc/squid/ads/domains"
# Blacklisted Socialnet
acl blacklist_domain_socialnet dstdomain
"/etc/squid/socialnet/domains"
acl blacklist_urls_socialnet url_regex "/etc/squid/socialnet/urls"
# Blacklisted Music
acl blacklist_domain_music dstdomain "/etc/squid/music/domains"
acl blacklist_urls_music url_regex "/etc/squid/music/urls"
# Blacklisted Webmail
acl blacklist_domain_webmail dstdomain "/etc/squid/webmail/domains"
acl blacklist_urls_webmail url_regex "/etc/squid/webmail/urls"
# Denying blacklisted
http_access deny max-maq-por-usuario
http_access deny mocks_gl
http_access deny NAVEGACION_IP !Nav_full
http_access deny blacklist_domain_porn
http_access deny blacklist_urls_porn
http_access deny blacklist_domain_politic
http_access deny blacklist_domain_chat !Nav_full
http_access deny blacklist_domain_proxy
http_access deny blacklist_domain_suspect
http_access deny ads_url
http_access deny ads_domain
http_access deny blacklist_domain_socialnet !Nav_full !Rsocial
http_access deny blacklist_urls_socialnet !Nav_full !Rsocial
http_access deny blacklist_domain_music !Nav_full
http_access deny blacklist_urls_music !Nav_full
http_access deny blacklist_domain_webmail !Nav_full
http_access deny blacklist_urls_webmail !Nav_full
http_reply_access deny deny_rep_mime_flashvideo !Nav_full
# Time limitations[from 830am to 430pm, weekly working time]
#acl workingtime time MTWHF 08:30-16:30
#acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
#http_access deny workingtime not_work_domains !Nav_full !Rsocial
#################################
#http_access allow Squid_Login pc-int Nav_Int
#http_access allow Squid_Login cuba localnet
#http_access deny !Squid_Login
#################################
# Denegar Todo
http_access deny all
icp_access deny all
========================
Josvany Hernández Ortega.
Administrador de Red.
Telf. +53 7 682 3279
Pizz. +53 7 682 9563 al 70
Ext. 108
josvanyho(a)centis.edu.cu <mailto:josvanyho@centis.edu.cu>
========================
_______________________________________________
Gutl-l mailing list --gutl-l(a)listas.jovenclub.cu
<mailto:gutl-l@listas.jovenclub.cu>
To unsubscribe send an email togutl-l-leave(a)listas.jovenclub.cu
<mailto:gutl-l-leave@listas.jovenclub.cu>
_______________________________________________
Gutl-l mailing list -- gutl-l(a)listas.jovenclub.cu
To unsubscribe send an email to gutl-l-leave(a)listas.jovenclub.cu
por arriba veo esto:
"dc=centis,dc=cu" -D "cn=administrator,cn=users,dc=centis,dc=cu" -w
"11111" -f saMAccountName=%s -h 172.168.1.205
auth_param basic children 5
tu dominio es centis.edu.cu y estas poniendo solo dc=centis,dc=cu
cuando debe ser dc=centis,dc=edu,dc=cu
--
Juan Carlos Hernández Gallardo
Esp. C en Ciencias Informáticas
UPI Pedraplén Sur Ciego de Ávila
Email: juanca(a)psurcav.co.cu
1:33 p.m.
El 1/7/20 a las 10:58, Josvany Hernández Ortega escribió:
Estoy teniendo problemas con esto necesito que alguien me revise el
orden la las acl y la sintaxis de las mismas, por favor estoy
volviéndome loco con respecto a este tema. Aquí les dejo mis acl, Esto
es Squid 5.0.2. las cosas que están repetidas y comentadas he sido yo
tratando de dar pie con bolas.
#Squid ACL
acl localhost src 172.16.1.220/32
acl localnet src 172.16.0.0/22
acl SSL_ports port 443 # HTTPS
acl SSL_ports port 563 # SNEWS
acl SSL_ports port 873 # RSYNC
acl Safe_ports port 21 # FTP
acl Safe_ports port 22 # SSH
acl Safe_ports port 25 # SMTP
acl Safe_ports port 70 # GOPHER
acl Safe_ports port 80 # HTTP
acl Safe_ports port 110 # POP3
acl Safe_ports port 210 # WAIS
acl Safe_ports port 280 # HTTP-MGMT
acl Safe_ports port 443 # HTTPS
acl Safe_ports port 488 # GSS-HTTP
acl Safe_ports port 591 # FILEMAKER
acl Safe_ports port 631 # CUPS
acl Safe_ports port 777 # MULTILING HTTP
acl Safe_ports port 873 # RSYNC
acl Safe_ports port 901 # SWAT
acl Safe_ports port 5222 # JABBER
acl Safe_ports port 1025-65535 # UNREGISTERED PORTS
acl Safe_ports port 53 # DNS
acl Safe_ports port 7071 # Zimbra WebAdmin
acl Safe_ports port 9090 # Jabber Admin
acl Safe_ports port 123 # NTP
## Methods allowed
acl Safe_method method CONNECT GET HEAD POST
http_access deny !Safe_method
## Protocols allowed
#acl Safe_proto proto HTTP SSL
#http_access deny !Safe_proto
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
# Only allow cachemgr access from localhost
http_access allow localhost localnet
# Time limitations[from 830am to 430pm, weekly working time]
acl workingtime time MTWHF 08:30-16:30
acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
http_access deny workingtime not_work_domains !Nav_full !Rsocial
## Autenticacion
acl pc-int src "/etc/squid/pcinternet/pc"
acl cuba dstdomain .cu
http_access allow Squid_Login pc-int Nav_Int
http_access allow Squid_Login cuba localnet
# Only 20 connection threads per ip[EXAMPLE but works]
acl limitreq maxconn 20
http_access deny limitreq !Nav_full
# Denegar Videos
acl deny_rep_mime_flashvideo rep_mime_type video/flv
#EVITAR NAVEGACION POR IP
acl NAVEGACION_IP dstdom_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$
# Limite en cantidad de veces q puede estar uno logueado
acl max-maq-por-usuario max_user_ip -s 1
#EVITAR BURLAS A GOOGLE
acl mocks_gl url_regex google.com[\.[A-Z][a-z]]/gwt
acl mocks_gl url_regex google.com.cu/gwt
acl mocks_gl url_regex google.com.cu/xhtml
acl mocks_gl url_regex google.com.cu/m
acl mocks_gl url_regex google.com.cu/pda
# Whitelisting sites
acl whitelist dstdomain "/etc/squid/allowed/whitelist"
# Allowing whitelisting
http_access allow whitelist
# Blacklisted stuff Porno
acl blacklist_domain_porn dstdomain "/etc/squid/porn/domains"
acl blacklist_urls_porn url_regex "/etc/squid/porn/regularexpressions"
# Politics related
acl blacklist_domain_politic dstdomain "/etc/squid/politic/domains"
# Chat
acl blacklist_domain_chat dstdomain "/etc/squid/chat/domains"
# Anonymous proxies
acl blacklist_domain_proxy dstdomain "/etc/squid/proxy/domains"
# Weird domains
acl blacklist_domain_suspect dstdomain "/etc/squid/suspect/domains"
# ADS
acl ads_url url_regex "/etc/squid/ads/regularexpressions"
acl ads_domain dstdomain "/etc/squid/ads/domains"
# Blacklisted Socialnet
acl blacklist_domain_socialnet dstdomain "/etc/squid/socialnet/domains"
acl blacklist_urls_socialnet url_regex "/etc/squid/socialnet/urls"
# Blacklisted Music
acl blacklist_domain_music dstdomain "/etc/squid/music/domains"
acl blacklist_urls_music url_regex "/etc/squid/music/urls"
# Blacklisted Webmail
acl blacklist_domain_webmail dstdomain "/etc/squid/webmail/domains"
acl blacklist_urls_webmail url_regex "/etc/squid/webmail/urls"
# Denying blacklisted
http_access deny max-maq-por-usuario
http_access deny mocks_gl
http_access deny NAVEGACION_IP !Nav_full
http_access deny blacklist_domain_porn
http_access deny blacklist_urls_porn
http_access deny blacklist_domain_politic
http_access deny blacklist_domain_chat !Nav_full
http_access deny blacklist_domain_proxy
http_access deny blacklist_domain_suspect
http_access deny ads_url
http_access deny ads_domain
http_access deny blacklist_domain_socialnet !Nav_full !Rsocial
http_access deny blacklist_urls_socialnet !Nav_full !Rsocial
http_access deny blacklist_domain_music !Nav_full
http_access deny blacklist_urls_music !Nav_full
http_access deny blacklist_domain_webmail !Nav_full
http_access deny blacklist_urls_webmail !Nav_full
http_reply_access deny deny_rep_mime_flashvideo !Nav_full
# Time limitations[from 830am to 430pm, weekly working time]
#acl workingtime time MTWHF 08:30-16:30
#acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
#http_access deny workingtime not_work_domains !Nav_full !Rsocial
#################################
#http_access allow Squid_Login pc-int Nav_Int
#http_access allow Squid_Login cuba localnet
#http_access deny !Squid_Login
#################################
# Denegar Todo
http_access deny all
icp_access deny all
========================
Josvany Hernández Ortega.
Administrador de Red.
Telf. +53 7 682 3279
Pizz. +53 7 682 9563 al 70
Ext. 108
josvanyho(a)centis.edu.cu <mailto:josvanyho@centis.edu.cu>
========================
_______________________________________________
Gutl-l mailing list -- gutl-l(a)listas.jovenclub.cu
To unsubscribe send an email to gutl-l-leave(a)listas.jovenclub.cu
la acl Squid_Login donde esta declarada porque no la veo por ninguna
parte en tu configuración, ni hay ninguna de tipo proxy_auth ni tampoco
auth_param
????
--
Arian Molina Aguilera
Administrador de Redes y Servicios Telemáticos
Linux Usuario Registrado #392892
Telfs: +53(7)696-7510 ext 236
jabber: linuxcuba(a)teknik.io
Brascuba Cigarrillos S.A. La Habana. Cuba.
“Nunca consideres el estudio como una obligación,
sino como una oportunidad para penetrar en el bello
y maravilloso mundo del saber. Albert Einstein”
1:46 p.m.
El 1/7/20 a las 12:14, Josvany Hernández Ortega escribió:
Aquí va completo.
========================
Josvany Hernández Ortega.
Administrador de Red.
Telf. +53 7 682 3279
Pizz. +53 7 682 9563 al 70
Ext. 108
josvanyho(a)centis.edu.cu <mailto:josvanyho@centis.edu.cu>
========================
*De:*Micky <maikel.manuel(a)ipi.cm.rimed.cu>
*Enviado el:* miércoles, 1 de julio de 2020 12:04
*Para:* gutl-l(a)listas.jovenclub.cu
*Asunto:* [Gutl-l] Re: Squid Urgente
Dejame hacerte una pregunta esto es todo el conf de tu squid??? te
pregunto por que no veo ninguna acl para la autenticacion y supongo
que tengas conexion directa
El 1/7/20 a las 10:58, Josvany Hernández Ortega escribió:
Estoy teniendo problemas con esto necesito que alguien me revise
el orden la las acl y la sintaxis de las mismas, por favor estoy
volviéndome loco con respecto a este tema. Aquí les dejo mis acl,
Esto es Squid 5.0.2. las cosas que están repetidas y comentadas
he sido yo tratando de dar pie con bolas.
#Squid ACL
acl localhost src 172.16.1.220/32
acl localnet src 172.16.0.0/22
acl SSL_ports port 443 # HTTPS
acl SSL_ports port 563 # SNEWS
acl SSL_ports port 873 # RSYNC
acl Safe_ports port 21 # FTP
acl Safe_ports port 22 # SSH
acl Safe_ports port 25 # SMTP
acl Safe_ports port 70 # GOPHER
acl Safe_ports port 80 # HTTP
acl Safe_ports port 110 # POP3
acl Safe_ports port 210 # WAIS
acl Safe_ports port 280 # HTTP-MGMT
acl Safe_ports port 443 # HTTPS
acl Safe_ports port 488 # GSS-HTTP
acl Safe_ports port 591 # FILEMAKER
acl Safe_ports port 631 # CUPS
acl Safe_ports port 777 # MULTILING HTTP
acl Safe_ports port 873 # RSYNC
acl Safe_ports port 901 # SWAT
acl Safe_ports port 5222 # JABBER
acl Safe_ports port 1025-65535 # UNREGISTERED PORTS
acl Safe_ports port 53 # DNS
acl Safe_ports port 7071 # Zimbra WebAdmin
acl Safe_ports port 9090 # Jabber Admin
acl Safe_ports port 123 # NTP
## Methods allowed
acl Safe_method method CONNECT GET HEAD POST
http_access deny !Safe_method
## Protocols allowed
#acl Safe_proto proto HTTP SSL
#http_access deny !Safe_proto
# Deny requests to certain unsafe ports
http_access deny !Safe_ports
# Only allow cachemgr access from localhost
http_access allow localhost localnet
# Time limitations[from 830am to 430pm, weekly working time]
acl workingtime time MTWHF 08:30-16:30
acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
http_access deny workingtime not_work_domains !Nav_full !Rsocial
## Autenticacion
acl pc-int src "/etc/squid/pcinternet/pc"
acl cuba dstdomain .cu
http_access allow Squid_Login pc-int Nav_Int
http_access allow Squid_Login cuba localnet
# Only 20 connection threads per ip[EXAMPLE but works]
acl limitreq maxconn 20
http_access deny limitreq !Nav_full
# Denegar Videos
acl deny_rep_mime_flashvideo rep_mime_type video/flv
#EVITAR NAVEGACION POR IP
acl NAVEGACION_IP dstdom_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$
# Limite en cantidad de veces q puede estar uno logueado
acl max-maq-por-usuario max_user_ip -s 1
#EVITAR BURLAS A GOOGLE
acl mocks_gl url_regex google.com[\.[A-Z][a-z]]/gwt
acl mocks_gl url_regex google.com.cu/gwt
acl mocks_gl url_regex google.com.cu/xhtml
acl mocks_gl url_regex google.com.cu/m
acl mocks_gl url_regex google.com.cu/pda
# Whitelisting sites
acl whitelist dstdomain "/etc/squid/allowed/whitelist"
# Allowing whitelisting
http_access allow whitelist
# Blacklisted stuff Porno
acl blacklist_domain_porn dstdomain "/etc/squid/porn/domains"
acl blacklist_urls_porn url_regex "/etc/squid/porn/regularexpressions"
# Politics related
acl blacklist_domain_politic dstdomain "/etc/squid/politic/domains"
# Chat
acl blacklist_domain_chat dstdomain "/etc/squid/chat/domains"
# Anonymous proxies
acl blacklist_domain_proxy dstdomain "/etc/squid/proxy/domains"
# Weird domains
acl blacklist_domain_suspect dstdomain "/etc/squid/suspect/domains"
# ADS
acl ads_url url_regex "/etc/squid/ads/regularexpressions"
acl ads_domain dstdomain "/etc/squid/ads/domains"
# Blacklisted Socialnet
acl blacklist_domain_socialnet dstdomain
"/etc/squid/socialnet/domains"
acl blacklist_urls_socialnet url_regex "/etc/squid/socialnet/urls"
# Blacklisted Music
acl blacklist_domain_music dstdomain "/etc/squid/music/domains"
acl blacklist_urls_music url_regex "/etc/squid/music/urls"
# Blacklisted Webmail
acl blacklist_domain_webmail dstdomain "/etc/squid/webmail/domains"
acl blacklist_urls_webmail url_regex "/etc/squid/webmail/urls"
# Denying blacklisted
http_access deny max-maq-por-usuario
http_access deny mocks_gl
http_access deny NAVEGACION_IP !Nav_full
http_access deny blacklist_domain_porn
http_access deny blacklist_urls_porn
http_access deny blacklist_domain_politic
http_access deny blacklist_domain_chat !Nav_full
http_access deny blacklist_domain_proxy
http_access deny blacklist_domain_suspect
http_access deny ads_url
http_access deny ads_domain
http_access deny blacklist_domain_socialnet !Nav_full !Rsocial
http_access deny blacklist_urls_socialnet !Nav_full !Rsocial
http_access deny blacklist_domain_music !Nav_full
http_access deny blacklist_urls_music !Nav_full
http_access deny blacklist_domain_webmail !Nav_full
http_access deny blacklist_urls_webmail !Nav_full
http_reply_access deny deny_rep_mime_flashvideo !Nav_full
# Time limitations[from 830am to 430pm, weekly working time]
#acl workingtime time MTWHF 08:30-16:30
#acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
#http_access deny workingtime not_work_domains !Nav_full !Rsocial
#################################
#http_access allow Squid_Login pc-int Nav_Int
#http_access allow Squid_Login cuba localnet
#http_access deny !Squid_Login
#################################
# Denegar Todo
http_access deny all
icp_access deny all
========================
Josvany Hernández Ortega.
Administrador de Red.
Telf. +53 7 682 3279
Pizz. +53 7 682 9563 al 70
Ext. 108
josvanyho(a)centis.edu.cu <mailto:josvanyho@centis.edu.cu>
========================
_______________________________________________
Gutl-l mailing list -- gutl-l(a)listas.jovenclub.cu
<mailto:gutl-l@listas.jovenclub.cu>
To unsubscribe send an email to gutl-l-leave(a)listas.jovenclub.cu
<mailto:gutl-l-leave@listas.jovenclub.cu>
_______________________________________________
Gutl-l mailing list -- gutl-l(a)listas.jovenclub.cu
To unsubscribe send an email to gutl-l-leave(a)listas.jovenclub.cu
borra un espacio que hay después de REQUIRE
#Ask for AUTH
acl Squid_Login proxy_auth REQUIRED
a demás de comprobar en consola la validez de esto,
/usr/lib/squid/basic_ldap_auth -P -R -b "dc=centis,dc=cu" -D
"cn=administrator,cn=users,dc=centis,dc=cu" -w "11111" -f
saMAccountName=%s -h 172.168.1.205
/usr/lib/squid/ext_ldap_group_acl -P -R -b "dc=centis,dc=cu" -D
"cn=Administrator,cn=Users,dc=centis,dc=cu" -w "11111" -f
"(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%a,ou=proxy,dc=centis,dc=cu))"
-h 172.168.1.205
Otra cosa no tienes porque usar la cuenta administrador con máximos
privilegios, crea una cuenta del sistema sata, ej squid para consultar
el ldap, recomendado que debes de utilizar este metodo que es
vulnerables y emplees autenticación kerberos.
no tienes que especificar esto,
http_access allow Squid_Login pc-int Nav_Int
http_access allow Squid_Login cuba localnet
incluyendo Squid_Login , se pone así,
http_access allow pc-int Nav_Int
http_access allow cuba localnet
Al llamar a los grupos Nav_Int ya esta implícito la necesidad de la
autenticación que es requerida como ya se pone en la linea acl
Squid_Login proxy_auth REQUIRED, por lo tanto esto esta de más en los
http_access y considera poner estos después de todos los acls y los
http_access que deniegan, como las blacklist. Debido a esto esta acl no
hace nada http_access deny NAVEGACION_IP !Nav_full, porque ya lo
permitiste más arriba, squid lee la conf y las acls en el mismo orden en
que se especifican en el archivo de configuración.
Corrige todo esto y nos comentas.
--
Arian Molina Aguilera
Administrador de Redes y Servicios Telemáticos
Linux Usuario Registrado #392892
Telfs: +53(7)696-7510 ext 236
jabber: linuxcuba(a)teknik.io
Brascuba Cigarrillos S.A. La Habana. Cuba.
“Nunca consideres el estudio como una obligación,
sino como una oportunidad para penetrar en el bello
y maravilloso mundo del saber. Albert Einstein”
1:51 p.m.
El 1/7/20 a las 13:00, Juan Carlos escribió:
El 01/07/2020 a las 12:14, Josvany Hernández Ortega escribió:
>
> Aquí va completo.
>
>
>
> ========================
>
> Josvany Hernández Ortega.
>
> Administrador de Red.
>
> Telf. +53 7 682 3279
>
> Pizz. +53 7 682 9563 al 70
>
> Ext. 108
>
> josvanyho(a)centis.edu.cu <mailto:josvanyho@centis.edu.cu>
>
> ========================
>
>
>
> *De:*Micky <maikel.manuel(a)ipi.cm.rimed.cu>
> *Enviado el:* miércoles, 1 de julio de 2020 12:04
> *Para:* gutl-l(a)listas.jovenclub.cu
> *Asunto:* [Gutl-l] Re: Squid Urgente
>
>
>
> Dejame hacerte una pregunta esto es todo el conf de tu squid??? te
> pregunto por que no veo ninguna acl para la autenticacion y supongo
> que tengas conexion directa
>
> El 1/7/20 a las 10:58, Josvany Hernández Ortega escribió:
>
> Estoy teniendo problemas con esto necesito que alguien me revise
> el orden la las acl y la sintaxis de las mismas, por favor estoy
> volviéndome loco con respecto a este tema. Aquí les dejo mis acl,
> Esto es Squid 5.0.2. las cosas que están repetidas y comentadas
> he sido yo tratando de dar pie con bolas.
>
>
>
> #Squid ACL
>
>
>
> acl localhost src 172.16.1.220/32
>
> acl localnet src 172.16.0.0/22
>
>
>
> acl SSL_ports port 443 # HTTPS
>
> acl SSL_ports port 563 # SNEWS
>
> acl SSL_ports port 873 # RSYNC
>
> acl Safe_ports port 21 # FTP
>
> acl Safe_ports port 22 # SSH
>
> acl Safe_ports port 25 # SMTP
>
> acl Safe_ports port 70 # GOPHER
>
> acl Safe_ports port 80 # HTTP
>
> acl Safe_ports port 110 # POP3
>
> acl Safe_ports port 210 # WAIS
>
> acl Safe_ports port 280 # HTTP-MGMT
>
> acl Safe_ports port 443 # HTTPS
>
> acl Safe_ports port 488 # GSS-HTTP
>
> acl Safe_ports port 591 # FILEMAKER
>
> acl Safe_ports port 631 # CUPS
>
> acl Safe_ports port 777 # MULTILING HTTP
>
> acl Safe_ports port 873 # RSYNC
>
> acl Safe_ports port 901 # SWAT
>
> acl Safe_ports port 5222 # JABBER
>
> acl Safe_ports port 1025-65535 # UNREGISTERED PORTS
>
> acl Safe_ports port 53 # DNS
>
> acl Safe_ports port 7071 # Zimbra WebAdmin
>
> acl Safe_ports port 9090 # Jabber Admin
>
> acl Safe_ports port 123 # NTP
>
>
>
>
>
> ## Methods allowed
>
> acl Safe_method method CONNECT GET HEAD POST
>
> http_access deny !Safe_method
>
>
>
> ## Protocols allowed
>
> #acl Safe_proto proto HTTP SSL
>
> #http_access deny !Safe_proto
>
>
>
> # Deny requests to certain unsafe ports
>
> http_access deny !Safe_ports
>
>
>
> # Only allow cachemgr access from localhost
>
> http_access allow localhost localnet
>
>
>
> # Time limitations[from 830am to 430pm, weekly working time]
>
> acl workingtime time MTWHF 08:30-16:30
>
> acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
>
> http_access deny workingtime not_work_domains !Nav_full !Rsocial
>
>
>
> ## Autenticacion
>
> acl pc-int src "/etc/squid/pcinternet/pc"
>
> acl cuba dstdomain .cu
>
> http_access allow Squid_Login pc-int Nav_Int
>
> http_access allow Squid_Login cuba localnet
>
>
>
> # Only 20 connection threads per ip[EXAMPLE but works]
>
> acl limitreq maxconn 20
>
> http_access deny limitreq !Nav_full
>
>
>
> # Denegar Videos
>
> acl deny_rep_mime_flashvideo rep_mime_type video/flv
>
>
>
> #EVITAR NAVEGACION POR IP
>
> acl NAVEGACION_IP dstdom_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$
>
>
>
> # Limite en cantidad de veces q puede estar uno logueado
>
> acl max-maq-por-usuario max_user_ip -s 1
>
>
>
> #EVITAR BURLAS A GOOGLE
>
> acl mocks_gl url_regex google.com[\.[A-Z][a-z]]/gwt
>
> acl mocks_gl url_regex google.com.cu/gwt
>
> acl mocks_gl url_regex google.com.cu/xhtml
>
> acl mocks_gl url_regex google.com.cu/m
>
> acl mocks_gl url_regex google.com.cu/pda
>
>
>
> # Whitelisting sites
>
> acl whitelist dstdomain "/etc/squid/allowed/whitelist"
>
>
>
> # Allowing whitelisting
>
> http_access allow whitelist
>
>
>
> # Blacklisted stuff Porno
>
> acl blacklist_domain_porn dstdomain "/etc/squid/porn/domains"
>
> acl blacklist_urls_porn url_regex
> "/etc/squid/porn/regularexpressions"
>
>
>
> # Politics related
>
> acl blacklist_domain_politic dstdomain "/etc/squid/politic/domains"
>
>
>
> # Chat
>
> acl blacklist_domain_chat dstdomain "/etc/squid/chat/domains"
>
>
>
> # Anonymous proxies
>
> acl blacklist_domain_proxy dstdomain "/etc/squid/proxy/domains"
>
>
>
> # Weird domains
>
> acl blacklist_domain_suspect dstdomain "/etc/squid/suspect/domains"
>
>
>
> # ADS
>
> acl ads_url url_regex "/etc/squid/ads/regularexpressions"
>
> acl ads_domain dstdomain "/etc/squid/ads/domains"
>
>
>
> # Blacklisted Socialnet
>
> acl blacklist_domain_socialnet dstdomain
> "/etc/squid/socialnet/domains"
>
> acl blacklist_urls_socialnet url_regex "/etc/squid/socialnet/urls"
>
>
>
> # Blacklisted Music
>
> acl blacklist_domain_music dstdomain "/etc/squid/music/domains"
>
> acl blacklist_urls_music url_regex "/etc/squid/music/urls"
>
>
>
> # Blacklisted Webmail
>
> acl blacklist_domain_webmail dstdomain "/etc/squid/webmail/domains"
>
> acl blacklist_urls_webmail url_regex "/etc/squid/webmail/urls"
>
>
>
> # Denying blacklisted
>
> http_access deny max-maq-por-usuario
>
> http_access deny mocks_gl
>
> http_access deny NAVEGACION_IP !Nav_full
>
> http_access deny blacklist_domain_porn
>
> http_access deny blacklist_urls_porn
>
> http_access deny blacklist_domain_politic
>
> http_access deny blacklist_domain_chat !Nav_full
>
> http_access deny blacklist_domain_proxy
>
> http_access deny blacklist_domain_suspect
>
> http_access deny ads_url
>
> http_access deny ads_domain
>
> http_access deny blacklist_domain_socialnet !Nav_full !Rsocial
>
> http_access deny blacklist_urls_socialnet !Nav_full !Rsocial
>
> http_access deny blacklist_domain_music !Nav_full
>
> http_access deny blacklist_urls_music !Nav_full
>
> http_access deny blacklist_domain_webmail !Nav_full
>
> http_access deny blacklist_urls_webmail !Nav_full
>
> http_reply_access deny deny_rep_mime_flashvideo !Nav_full
>
>
>
> # Time limitations[from 830am to 430pm, weekly working time]
>
> #acl workingtime time MTWHF 08:30-16:30
>
> #acl not_work_domains dstdomain "/etc/squid/denied/not_allowed"
>
> #http_access deny workingtime not_work_domains !Nav_full !Rsocial
>
>
>
>
>
> #################################
>
> #http_access allow Squid_Login pc-int Nav_Int
>
> #http_access allow Squid_Login cuba localnet
>
> #http_access deny !Squid_Login
>
> #################################
>
>
>
> # Denegar Todo
>
> http_access deny all
>
> icp_access deny all
>
>
>
> ========================
>
> Josvany Hernández Ortega.
>
> Administrador de Red.
>
> Telf. +53 7 682 3279
>
> Pizz. +53 7 682 9563 al 70
>
> Ext. 108
>
> josvanyho(a)centis.edu.cu <mailto:josvanyho@centis.edu.cu>
>
> ========================
>
>
>
>
>
> _______________________________________________
>
> Gutl-l mailing list -- gutl-l(a)listas.jovenclub.cu
<mailto:gutl-l@listas.jovenclub.cu>
>
> To unsubscribe send an email to gutl-l-leave(a)listas.jovenclub.cu
<mailto:gutl-l-leave@listas.jovenclub.cu>
>
>
> _______________________________________________
> Gutl-l mailing list -- gutl-l(a)listas.jovenclub.cu
> To unsubscribe send an email to gutl-l-leave(a)listas.jovenclub.cu
por arriba veo esto:
"dc=centis,dc=cu" -D "cn=administrator,cn=users,dc=centis,dc=cu" -w
"11111" -f saMAccountName=%s -h 172.168.1.205
auth_param basic children 5
tu dominio es centis.edu.cu y estas poniendo solo dc=centis,dc=cu
cuando debe ser dc=centis,dc=edu,dc=cu
--
Juan Carlos Hernández Gallardo
Esp. C en Ciencias Informáticas
UPI Pedraplén Sur Ciego de Ávila
Email: juanca(a)psurcav.co.cu
_______________________________________________
Gutl-l mailing list -- gutl-l(a)listas.jovenclub.cu
To unsubscribe send an email to gutl-l-leave(a)listas.jovenclub.cu
Ten en cuenta esto también que te comentan aquí con respecto a tu
dominio y la estructura de tu árbol LDAP en tu AD o Samba4.
--
Arian Molina Aguilera
Administrador de Redes y Servicios Telemáticos
Linux Usuario Registrado #392892
Telfs: +53(7)696-7510 ext 236
jabber: linuxcuba(a)teknik.io
Brascuba Cigarrillos S.A. La Habana. Cuba.
“Nunca consideres el estudio como una obligación,
sino como una oportunidad para penetrar en el bello
y maravilloso mundo del saber. Albert Einstein”
422
days inactive
422
days old
6 comments
4 participants
participants (4)
-
Arian Molina Aguilera -
Josvany Hernández Ortega -
Juan Carlos -
Micky