>http_access allow !Safe_ports
>если не глючу
>ето означет пропустить все порты кроме Safe_ports
>
>как я делаю:
>acl icq_port port 5190
>acl bank port 443
>acl ssl_t port 563
>acl connect method CONNECT
>
>http_access allow connect ssl_t
>http_access allow connect icq_port
>http_access allow connect bank
>
>попробуй так
Попробывал не помагает, сейчас это выглядит вот-так после некоторых исправлений.
#!!!
acl SSL_ports port 411 443 563 4430
acl ssl_t port 563 4430
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
#!!!
acl Safe_ports port 411 4430 # PSBClient
acl connect method CONNECT
acl PSBClient dst xx.xx.xx./32 xxx.xxx.xx.xx/32 <- айпи банка
acl ldap_password proxy_auth REQUIRED
external_acl_type acl_q_group negative_ttl=60 ttl=60 children=1 %LOGIN /usr/local/libexec/squid/squid_quota.pl
acl quota_group external acl_q_group
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access allow connect ssl_t
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
#
# We strongly recommend to uncomment the following to protect innocent
# web applications running on the proxy server who think that the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost
#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
# Example rule allowing access from your local networks. Adapt
# to list your (internal) IP networks from where browsing should
# be allowed
#acl our_networks src 192.168.1.0/24 192.168.2.0/24
#http_access allow our_networks
#!!!
http_access allow PSBClient
http_access allow ldap_password quota_group
# And finally deny all other access to this proxy
http_access deny all
Мля если на этой неделе я не исправлю ситуацию меня просто уволят. ПОМОГИТЕ!!!
