Pessoal,
to com um problema em um squid que configurei, pois quando navegando por ele não consigo de forma alguma acessar o site de simulação de habitação (muito utilizado aqui na empresa)
link: http://www8.caixa.gov.br/siopiinternet/simulaOperacaoInternet.do?method=inic...
o que pode ser?
desde já agradeço...
abaixo segue meu squid.conf e meu script iptables
---- SQUID CONF ---- http_port 3128 visible_hostname SrvProxy error_directory /usr/share/squid/errors/pt-br/ coredump_dir /var/spool/squid cache_access_log /var/log/squid/access.log hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin ? no_cache deny QUERY
auth_param basic children 5 auth_param basic realm (Servidor de Internet) auth_param basic credentialsttl 1 hours auth_param basic casesensitive off auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/confs/squid_passwd #authenticate_cache_garbage_interval 1 hour authenticate_ttl 1 hour refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 0 20% 4320 #acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 22 80 443 563 9443 2200 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 22 # ssh acl Safe_ports port 2200 # ssh acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl Safe_ports port 631 # cups acl Safe_ports port 86 # Speedy acl Safe_ports port 5800 # VNC acl Safe_ports port 5900 # VNC acl Safe_ports port 1527 # NFP acl Safe_ports port 8443 # NFP acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports
# ACL QUE EXIGE LOGIN DO USUARIO PARA NAVEGAR acl login proxy_auth REQUIRED # ACL DE LIBERACOES acl lib_usuarios proxy_auth "/etc/squid/confs/lib_usuarios" acl lib_sites dstdomain "/etc/squid/confs/lib_sites" acl lib_ip src "/etc/squid/confs/lib_ip" acl win url_regex -i windowsupdate update.microsoft.com # ACL DE BLOQUEIO acl neg_sites dstdomain "/etc/squid/confs/neg_sites" acl neg_hora time "/etc/squid/confs/neg_hora" acl neg_msn dstdomain "/etc/squid/confs/neg_msn" acl neg_msn2 url_regex "/etc/squid/confs/neg_msn2" acl msn url_regex -i /gateway/gateway.dll # FIM DECLARACOES ACLS ################################################################################ http_access allow all win http_access allow lib_ip http_access deny neg_msn http_access deny neg_msn2 http_access deny msn http_access deny neg_sites http_access allow lib_sites http_access allow !neg_hora http_access allow lib_usuarios http_access deny all http_reply_access allow all #icp_access allow all
---- SCRIPT IPTABLES ----
iptables -F iptables -F INPUT iptables -F OUTPUT iptables -F POSTROUTING -t nat iptables -F PREROUTING -t nat
iptables -t nat -I PREROUTING -s 192.168.7.10 -j ACCEPT iptables -t nat -I PREROUTING -s 192.168.7.11 -j ACCEPT iptables -t nat -I PREROUTING -s 192.168.7.12 -j ACCEPT
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 2200 -j DNAT --to-destination 192.168.7.1:2200 iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 192.168.7.100:3389
echo 1 > /proc/sys/net/ipv4/ip_forward iptables -P FORWARD ACCEPT iptables -A POSTROUTING -t nat -s 192.168.7.0/24 -o eth0 -j MASQUERADE