Liberar Hotmail com squid Transparente

afonsomoro
(usa Ubuntu)

Enviado em 17/05/2011 - 22:29h

Olá a todos que Puderem ajudar estou , trabalho em uma faculdade com rede wirelles , por este motivo , tenho que ter squid transparente , para não ficar configurando os navegadores dos alunos . pois bem ele funciona muito bem mas quando o aluno quer entrar no hotmail ou gmail ele não entra , vou passar meu Squid.conf e meu Firewall no RC.d Local .

http_port 192.168.3.4:3128 transparent
visible_hostname srvproxy
error_directory /usr/share/squid/errors/Portuguese/

cache_mem 64 MB
maximum_object_size_in_memory 64 KB
maximum_object_size 512 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 2048 16 256
cache_access_log /var/log/squid/access.log
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 # https
acl SSL_ports port 443 563
acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 2500 1025-65535
acl porta2500 myport 2500
maximum_object_size_in_memory 64 KB
maximum_object_size 512 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 2048 16 256
cache_access_log /var/log/squid/access.log
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 # https
acl SSL_ports port 443 563
acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 2500 1025-65535
acl porta2500 myport 2500
acl porta110 myport 110
acl purge method PURGE
acl CONNECT method CONNECT
acl NOCACHE url_regex "/etc/squid/sem-cache.txt" \?
no_cache deny NOCACHE
always_direct allow url
cache deny url
acl hotmail_domains dstdomain .hotmail.msn.com
header_access Accept-Encoding deny hotmail_domains
acl porta_liberada port 110



http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access allow !Safe_ports
http_access allow CONNECT !SSL_ports
http_access allow CONNECT porta2500
http_access allow CONNECT porta110
http_access allow porta_liberada


acl nevercache url_regex "/etc/squid/nevercache.txt"
no_cache deny nevercache
always_direct allow nevercache


acl redelocal src 192.168.3.0/24
#delay_pools 1
#delay_class 1 2
#delay_parameters 1 114688/114688 16384/16348
#delay_access 1 allow redelocal
http_access allow localhost
http_access allow redelocal
http_access deny all


##########################################


Agora meus Iptables

I A /etc/rc.local (sh) iptable Row 38 Col 2 10:32 Ctrl-K H for help

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -d www.aspescola.com.br
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128


iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j \
REDIRECT --to-port 3128


Por favor se alguem puder ajudar ae agradeço muito mesmo pois os alunos não conseguem acessar os emails . obrigado .