ipserver eth0 192.168.1.100/24 gateway 192.168.1.1 <= tot ครับ
eth1 191.168.2.1/24 gateway -
ipclient eth0 192.168.2.11 gateway 192.168.2.1
อาการ : set browser ให้เข้า internet ผ่าน squid 192.168.2.1/8080 ผลคือเครื่องลูกไม่สามารถเข้า internet ได้ แต่พอยกเลิกการ set browser เครื่องลูกเข้า internet ได้ครับ
file squid.conf
icp_port 3130
http_port 3128
http_port 800
http_port 8080
hierarchy_stoplist cgi-bin ? .acgi .asp .cgi .css .chtml .htm .html .jhtml .js .jsp .perl .phtml .pl .php .php3 .php4 .shtml .xhtml .xml
acl QUERY urlpath_regex cgi-bin \? \.acgi \.asp \.cgi \.css \.chtml \.htm \.html \.jhtml \.js \.jsp \.perl \.phtml \.pl \.php \.php3 \.php4 \.shtml \.xhtml \.xml
cache deny QUERY
#cache_peer proxy.asianet.co.th parent 8080 0 no-query
#cache_peer 203.144.143.6 sibling 8080 0 no-query
#peer_connect_timeout 5 seconds
cache_mem 128 MB
#maximum_object_size_in_memory 24 Kb
#half_closed_clients off
minimum_object_size 0 KB
maximum_object_size 25600 KB
#cache_swap_high 98%
#cache_swap_low 95%
memory_replacement_policy heap GDSF
cache_replacement_policy heap GDSF
cache_dir aufs c:/squid/cache/cache1 800 16 256
#logformat squid %ts.%03tu %6tr %>a %Ss/%03Hs %<st %rm %ru %un %Sh/%<A %mt
logformat common %{%d-%m-%y : %H.%M.%S}tl : %>a : %Ss/%03Hs %rm : %ru %un %Sh/%<A %mt
#logformat combined [%tl] - - %>a %ui %un "%rm %ru HTTP/%rv" "%{Referer}>h" %Ss:%Sh
access_log c:/squid/access.log common
#cache_store_log c:/squid/store.log squid
#cache_log c:/squid/cache.log squid
access_log none
cache_log none
cache_store_log none
mime_table c:/squid/etc/mime.conf
log_mime_hdrs off
cache_effective_user squid
cache_effective_group squid
refresh_pattern -i .(zip|gz|xfs|exe|arj|npz|lha|lzh|rar|tgz|tar|rar|jar|nup|wz|Z)$ 525960 99% 525960 override-lastmod override-expire reload-into-ims ignore-reload
refresh_pattern -i .(class|pdf|rtf|doc|wp|wp5|ps|prn)$ 525960 99% 525960 override-lastmod override-expire reload-into-ims ignore-reload
refresh_pattern -i .(mov|avi|mpg|wav|au|mid|mp3)$ 525960 95% 525960 override-lastmod override-expire reload-into-ims ignore-reload
refresh_pattern -i .(jpg|gif|jpeg|png|css|js)$ 525960 18000% 525960 override-lastmod override-expire reload-into-ims ignore-reload
refresh_pattern -i .(bmp|tif|tiff|xbm)$ 525960 17000% 525960 override-lastmod override-expire reload-into-ims ignore-reload
refresh_pattern -i .(swf)$ 525960 20000% 525960 override-lastmod override-expire reload-into-ims ignore-reload
refresh_pattern ^ftp: 4320 20% 43200
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 1440 50% 14400
umask 027
via off
forwarded_for off
coredump_dir c:/squid/var/cache
# ---- DNS OPTIONS
ipcache_size 4096
ipcache_low 90
ipcache_high 98
fqdncache_size 4096
cilent_netmask 255.255.255.255/255.255.255.0
dns_nameserver 127.0.0.1
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 210 1025-65535 280 488 591 777
acl CONNECT method CONNECT
acl localnetwork0 src 127.0.0.0/8
acl localnetwork1 src 192.168.0.0/24
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnetwork0
http_access allow localnetwork1
#http_access deny all
http_access allow all
http_reply_access allow all
icp_access deny all
auth_param basic program C:/squid/libexec/ncsa_auth.exe C:/squid/etc/passwd <<< ที่อยู่ของไฟล์ passwd
auth_param basic children 3 <<< login เกิน 3 ครั้งถ้าไม่ผ่านให้ login ใหม่
auth_param basic realm SquidNT Proxy Server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
#authenticate_ttl 1 hour <<< ให้เข้าเล่นได้เป็นเวลา 1 ชั่วโมงก่อนถูกตัด
acl password proxy_auth REQUIRED
http_access allow password
http_port 192.168.2.1:8080 transparent
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
ie_refresh on
visible_hostname proxyBYsiamcafe.net
cache_mgr
[email protected]ftp_sanitycheck off
