ผมใช้ Clark Connect4.3 เป็นเครื่องแม่ข่าย เครื่องลูก ping ไปที่
www.tseo.or.th reply กลับมา แปลว่าเจอ
แต่ผมไม่สามารถเข้า web ได้ มันคล้ายกับโดน squid block ไว้ ( มีรูปภาพแนบมาให้ดูด้วย )
แต่ผมไม่ได้ block web นี้ไว้เลย นี้คือ squid.conf ครับ รบกวนผู้รู้ช่วยทีครับ
# webconfig: http_port_start
http_port 192.168.1.1:3128
http_port 127.0.0.1:3128
# webconfig: http_port_end
cache_mem 16 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 8 KB
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF
cache_dir ufs /var/spool/squid 2000 12 12
cache_access_log /var/log/squid/access.log
# cache_log /var/log/squid/cache.log
# cache_store_log /var/log/squid/store.log
#emulate_httpd_log on
#mime_table /etc/squid/mime.conf
pid_filename /var/run/squid.pid
ftp_user Squid@
ftp_list_width 32
ftp_passive on
ftp_sanitycheck off
redirect_children 3
auth_param basic program /usr/lib/squid/squid_ldap_auth -b "dc=clarkconnect,dc=lan" -f "(&(objectClass=pcnProxyAccount)(uid=%s))" -h 127.0.0.1 -D "cn=manager,cn=internal,dc=clarkconnect,dc=lan" -W /etc/squid/ldap.conf -s one -v 3 -U pcnProxyPassword -d
auth_param basic children 1
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 95
shutdown_lifetime 5 seconds
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.0/8
# webconfig: acl_start
acl webconfig_lan src 192.168.1.0/24
acl webconfig_to_lan dst 192.168.1.0/24
# webconfig: acl_end
acl to_localhost dst 127.0.0.0/8
acl password proxy_auth REQUIRED
acl hotspot src 10.0.100.0/24
acl hotspot src 192.168.200.0/24
######### Block MSN ############
#acl msn_server req_mime_type application/x-msn-messenger
#acl msn_url url_regex -i gateway.dll
#acl MSN req_mime_type ^application/x-msn-messenger$
#http_access deny msn_server
#http_access deny msn_url
#http_access deny MSN
#acl badwordstxt url_regex "/etc/squid/badwords.txt"
#http_access deny badwordstxt
###### Block Mac ######
acl macf1 arp 00:26:18:2e:db:01
acl macf2 arp 00:13:72:6c:7f:2c
acl macf3 arp 00:13:ce:e1:72:f9
acl macf4 arp 00:26:18:2e:db:01
acl macf5 arp bc:ae:c5:67:cb:0f
http_access deny macf1
http_access deny macf2
http_access deny macf3
http_access deny macf4
http_access deny macf5
http_access allow all
###### limit Speet Download Youtube ######
acl UNLIMITTIME time SMTWHFA 02:00-05:00
acl magic_words1 url_regex -i video/flv videoplayback .flv .mp4
# ----------------------------
# DELAY_POOLS
# ----------------------------
delay_pools 1
delay_class 1 2
delay_parameters 1 602400/602400 202400/102400
delay_access 1 allow magic_words1 !UNLIMITTIME
delay_access 1 deny all
# ----------------------------
##########################
###Techtoy Block Bit torrent config###
#########################
#acl bit_torrent req_mime_type application/x-bittorent
#acl bit_torrent req_mime_type ^application/x-bittorent$
#http_access deny bit_torrent
###############################
#### Block Bit and uTorrent ###########
###############################
#acl bit url_regex -i .*announce passkey
#http_access deny bit
###############################
############################
#### Block URL, Domain, WWW ####
############################
#acl url dstdomain wansexy.com siamha.com sexy141.com
#http_access deny url
#####################
###############################
#### Block Files Download ###########
###############################
#acl download urlpath_regex \.torrent$ \.exe$ \.torrent
#http_access deny download
###############################
acl SSL_ports port 443 563
acl SSL_ports port 81 10000
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 81 82 83 10000 # Web-based administration tools
acl CONNECT method CONNECT
http_access allow webconfig_lan
http_access allow hotspot
http_access allow manager localhost
http_access deny manager
http_access allow webconfig_to_lan
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow all
http_reply_access allow all
icp_access allow all
#############################
### Download Limit 20 Mb.####
#############################
### 1 Mb. = 1048000 kb.######
#############################
### Samble 20 Mb. = 1048000*20=20960000
#############################
#reply_body_max_size 20960000 allow hotspot
##################################################
reply_body_max_size 73400320 allow webconfig_lan
cache_mgr root
cache_effective_user squid
cache_effective_group squid
visible_hostname proxy
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
logfile_rotate 0
forwarded_for on
coredump_dir /var/spool/squid
#header_access User-Agent deny all
#header_replace User-Agent Mozilla/5.0 (compatible; MSIE 6.0)
#header_access Accept deny all
#header_replace Accept */*
#header_access Accept-Language deny all
