请问各位高手 小弟我刚接手的Linux CentOS-5.3 有用proxy 限制上班时间锁上网80 port.
但公司新系统又换简讯公司,我的问题又来了,这间简讯验证需要是走30080 port.
请问我 squid.conf 需要如何设定60.251.6.23:30080 到的了.
以下是公司的 proxy 设定 , 设定档内容:
acl all src 0.0.0.0/0.0.0.0
acl direct-net dstdomain .api.every8d.com
always_direct allow direct-net
acl all_pass_ip src "/etc/squid/setting/all_pass_ip"
acl callcenter_leader_ip dst "/etc/squid/setting/squid.superallow.hosts"
acl basic_user_ip src "/etc/squid/setting/squid.allow.hosts"
#acl yushun_ip src "/etc/squid/setting/yushun_user_ip"
acl denytimes time "/etc/squid/squid.deny.times"
acl morning time 9:00-12:20
acl afternoon time 13:40-18:00
acl allurl dstdomain "/etc/squid/squid.allurl"
acl whitedst dst "/etc/squid/squid.allow.whitedst"
acl whilefile urlpath_regex -i "/etc/squid/squid.allow.whilefile"
acl whileurl dstdomain "/etc/squid/squid.allow.whileurl"
acl blockfile urlpath_regex -i "/etc/squid/squid.deny.blockfile"
acl superblockurl dstdomain "/etc/squid/squid.superdeny.blockurl"
acl blockurl dstdomain "/etc/squid/squid.deny.blockurl"
acl yushunurl dstdomain "/etc/squid/setting/squid.yushundeny.blockurl"
acl lanurl dstdomain "/etc/squid/setting/lanurl
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl Safe_ports port 80 # http
acl SSL_ports port 443
acl Safe_ports port 21 # ftp
acl Safe_ports port 22
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 30080 # yoyo8
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 465 # google smtp ssl
acl Safe_ports port 995 # google pop ssl
****************************
http_access allow localhost
http_access allow all_pass_ip
http_access allow callcenter_leader_ip
http_access allow basic_user_ip lanurl
http_access deny yushunurl
#http_access allow yushun_ip
http_access deny superblockurl
http_access allow whilefile
http_access allow whileurl
http_access allow whitedst
http_access deny denytimes
http_access deny blockfile
http_access deny blockurl
http_access allow basic_user_ip
http_access deny all
我测试过加 acl SSL_ports port 30080 加了也不行.
还有 加了 http_access allow all . 全公司随时都能开80 上网了,但唯独 60.251.6.233:30080 .就是开不出来.
求救 求救!!