OpenForum RSS: squid+sarg+apache

squid 2.6 (reader)

Wed, 28 Jul 2010 12:35:28 GMT

>>� RH �� service iptables start �� /etc/sysconfig/iptables
>
>��, � ��.
>�� .
>�� ?.. =(
>�� iptables �� service iptables restart ��?..

http://www.opennet.ru/openforum/vsluhforumID10/4616.html

squid 2.6 (Ibrahimoff)

Wed, 28 Jul 2010 08:36:24 GMT

>� RH �� service iptables start �� /etc/sysconfig/iptables

��, � ��.
�� .
�� ?.. =(
�� iptables �� service iptables restart ��?..

squid 2.6 (reader)

Wed, 28 Jul 2010 08:25:41 GMT

� RH �� service iptables start �� /etc/sysconfig/iptables

squid 2.6 (Ibrahimoff)

Wed, 28 Jul 2010 07:30:51 GMT

�� .

� �� . �� 192.168.222.0 �� 192.168.0.0.
�� iptables-save, �� 2 �� -
-A POSTROUTING -s 192.168.222.0/255.255.255.0 -d ! 192.168.222.0/255.255.255.0 -j MASQUERADE
-A POSTROUTING -s 192.168.0.0/255.255.255.0 -d ! 192.168.0.0/255.255.255.0 -o eth1 -j MASQUERADE

� � iptables.conf �� -(. ��, �� 192.168.0.0 ..

�� iptables.conf:
==============================
# Generated by iptables-save v1.3.5 on Thu Jul 15 14:34:04 2010
*mangle
:PREROUTING ACCEPT [166:54062]
:INPUT ACCEPT [157:53258]
:FORWARD ACCEPT [3:179]
:OUTPUT ACCEPT [163:53125]
:POSTROUTING ACCEPT [166:53304]
COMMIT
# Completed on Thu Jul 15 14:34:04 2010
# Generated by iptables-save v1.3.5 on Thu Jul 15 14:34:04 2010
*nat
:PREROUTING ACCEPT [81715:8439881]
:POSTROUTING ACCEPT [58535:3676672]
:OUTPUT ACCEPT [39629:2476162]
-A POSTROUTING -o eth1 -s 192.168.0.0/255.255.255.0 -d ! 192.168.0.0/255.255.255.0 -j MASQUERADE

squid 2.6 (reader)

Tue, 27 Jul 2010 16:56:09 GMT

>[�� ]
>-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable
>COMMIT
># Completed on Tue Jul 27 16:58:43 2010
># Generated by iptables-save v1.3.5 on Tue Jul 27 16:58:43 2010
>*nat
>:PREROUTING ACCEPT [38164:3911030]
>:POSTROUTING ACCEPT [31398:1957571]
>:OUTPUT ACCEPT [24017:1480501]
>-A POSTROUTING -s 192.168.122.0/255.255.255.0 -d ! 192.168.122.0/255.255.255.0 -j MASQUERADE
>-A POSTROUTING -s 192.168.122.0/255.255.255.0 -d ! 192.168.122.0/255.255.255.0 -j MASQUERADE

� �� 192.168.0.0/24, � �� snat �� 192.168.122.0/24, �� POSTROUTING, ��
-A POSTROUTING -o eth1(�� ) -s 192.168.0.0/255.255.255.0 -d ! 192.168.0.0/255.255.255.0 -j MASQUERADE
�� , �� dns � ��

�� https - � �� ? �� , ��

�� , ��

squid 2.6 (Ibrahimoff)

Tue, 27 Jul 2010 12:18:26 GMT

��:

squid.conf
======
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
visible_hostname MySquid

acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY

cache_dir ufs /var/spool/squid 2048 16 256
maximum_object_size_in_memory 120 KB
cache_mem 128 MB
access_log /var/log/squid/access.log squid

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

http_port 192.168.0.1:3128
cache_mgr ivugar@gmail.com

acl SSL_ports port 443 465 563 587
acl Safe_ports port 110 #pop
acl Safe_ports port 25 #smtp
acl Safe_ports port 20000

acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_por

squid 2.6 (reader)

Tue, 27 Jul 2010 11:31:13 GMT

>[�� ]
>>
>>�� ? �� , ��
>>� �� , �� nat.
>>
>>https - �� , �� , � ��
>>�� ۣ� ��
>>
>>>
>
>��, ��. �� .

�� ? ��

>��, � �� . =( ��
>� �� ?.. �� ..

iptables-save ��
�� squid ��

squid 2.6 (Ibrahimoff)

Tue, 27 Jul 2010 11:07:02 GMT

>[�� ]
>>��! =)
>>��. �� . � �� https. -( https �� ..
>
>�� ? �� , ��
>� �� , �� nat.
>
>https - �� , �� , � ��
>�� ۣ� ��
>
>>

��, ��. �� .
��, � �� . =( �� ?.. �� ..

squid 2.6 (reader)

Tue, 27 Jul 2010 10:37:25 GMT

>[�� ]
>>
>>>�� - outlook � �� , �� www.xat.com - ��
>>>��. =(
>>
>>�� , �� nat �� ?
>>
>>>�� ! -)
>
>��! =)
>��. �� . � �� https. -( https �� ..

�� ? �� , �� , �� nat.

https - �� , �� , � �� ۣ� ��

>