Grupo acessa a internet

rafael-ti
(usa Fedora)

Enviado em 30/12/2010 - 16:14h

Boa tarde galera, preciso que um determinado grupo de ips acessem a internet livremente a todos os sites, porem o resto do range deve ser bloqueado, podem me ajuda criei o squidguard.conf mas mesmo assim todo mundo ta acessando a internet

default {
pass none
redirect http://10.100.100.1:81/cgi-bin/squidguard.cgi?clientaddr=%a&clientname=%n&targetgroup=%t&...
}
}
root@speedygap:/etc/squid # ^C
root@speedygap:/etc/squid # vi squidGuard.conf
#!/bin/sh

###############################################################################
### Path Declarations
###############################################################################

dbhome /var/lib/squidguard # g minusculo
logdir /var/log/squidGuard # G maiusculo

##############################################################################
### Destination group declarations
##############################################################################

dest abortion {
domainlist blacklists/abortion/domains
urllist blacklists/abortion/urls
logfile verbose abortion.log
}
dest whitelist {
domainlist blacklists/whitelist/domains
urllist blacklists/whitelist/urls
logfile verbose whitelist.log
}

#############################################################################
src rede-interna-liberada {
ip 10.100.100.100/32
ip 10.100.100.101/32
ip 10.100.100.121/32
ip 10.100.100.240/32
ip 10.100.100.33/32
ip 10.100.100.62/32
ip 10.100.100.63/32
ip 10.100.100.64/32
ip 10.100.100.65/32
ip 10.100.100.66/32
ip 10.100.100.67/32
ip 10.100.100.68/32
ip 10.100.100.72/32
ip 10.100.100.72/32
ip 10.100.100.195/32
ip 10.100.100.226/32

logfile verbose rede-interna-liberada.log
}

### ACL (source X destination) permissions
##############################################################################

acl {

rede-interna-liberada {
# Categorias liberadas a partir da lista default
# vacation
pass all
redirect http://127.0.0.1:81/cgi-bin/squidguard.cgi?clientaddr=%a&clientname=%n&targetgroup=%t&ur...
}

default {
pass none
redirect http://10.100.100.1:81/cgi-bin/squidguard.cgi?clientaddr=%a&clientname=%n&targetgroup=%t&...
}
}


nem usei os dest achei nao necessario...

rafael-ti
(usa Fedora)

Enviado em 30/12/2010 - 16:54h

colei ao contrario...mas da pra entender ne...