Bonjour à tous,
je me tourne vers vous après de longues heures de recherches sur le net.
J’ai installé sur une debian 6.0.1 squid3 et squidGuard (le tout en apt-get install)
j’ai configuré le fichier /etc/squid3/squid.conf comme suit:
[code]http_port 8080
icp_port 0
htcp_port 0
visible_hostname squid
Pour que le proxy soit serveur DNS :
dns_nameservers dns_fai ou/et dns_passerelle
dns_nameservers 10.176.155.206 10.176.155.202
dns_defnames on
acl manager proto cache_object
#acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/32
acl our_networks src 127.0.0.1/32 10.176.155.0/24
acl our_servers src 10.176.155.199-10.176.155.206
#acl our_destip dst 207.46.225.221 209.85.227.104
#acl our_destdom dstdomain .eset.com .avast.com
#acl our_bandst dstdomain .youtube.com .deezer.com .facebook.com .myspace.com .msn.com .msn.fr
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
le protocole cache_object (acl manager) ne pourra acc�der que depuis l’adresse 127.0.0.1 (acl localhost) et pas depuis une autre
http_access allow manager localhost
http_access deny manager
Interdit l’acc�s aux ports autres que 80, 21, 443 et de 1025 � 65535 (n�gation (!) de acl Safe_ports)
http_access deny !Safe_ports
Interdit l’acc�s vers 127.0.0.0/8 (acl to_localhost)
http_access deny to_localhost
Interdit l’acc�s vers les domaines d�finies dans acl our_bandst
#http_access deny our_bandst
Autorise l’acc�s depuis les serveurs d�finis dans acl our_servers
http_access allow our_servers
#http_access allow our_destip
Autorise l’acc�s vers les domaines d�finis dans acl our_destdomain
#http_access allow our_destdom
Autorise l’acc�s depuis mon r�seau (acl our_networks)
http_access allow our_networks
Interdit tout le reste (mot r�serv� all)
http_access deny all
http_reply_access allow all
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin ?
cache deny QUERY
coredump_dir /var/spool/squid3
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|?) 0 0% 0
refresh_pattern . 0 20% 4320
Attention si vous modifiez les valeurs de la ligne suivante : lancez squid3 -f /etc/squid3/squid.conf -z pour reconstruire le cache !
cache_dir ufs /var/spool/squid3 1024 256 256
Les journaux
cache_effective_user proxy
cache_effective_group proxy
cache_access_log /var/log/squid3/access.log common
cache_log /var/log/squid3/cache.log
cache_store_log /var/log/squid3/store.log
cache_swap_log /var/log/squid3/cache_swap.log
cache_mgr informatique@moa.fr
#LogFormat
logformat squid %tl %6tr %>a %Ss/%03>Hs %<Hs %<st %rm %ru %un %Sh/%<A %mt
#SquidGuard
#redirect_program /usr/bin/squidGuard
#redirect_children 10
url_rewrite_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf
positive_dns_ttl 1 day
negative_dns_ttl 1 hour
[/code]
Le fichier /etc/squid/squidGuard.conf comme suit:
[code]#
CONFIG FILE FOR SQUIDGUARD
dbhome /var/lib/squidguard/db
logdir /var/log/squid
TIME RULES:
abbrev for weekdays:
s = sun, m = mon, t =tue, w = wed, h = thu, f = fri, a = sat
time workhours {
weekly mtwhf 08:00 - 18:30
date --01 08:00 - 18:30
}
REWRITE RULES:
#rew dmz {
s@://admin/@://admin.foo.bar.de/@i
s@://foo.bar.de/@://www.foo.bar.de/@i
#}
SOURCE ADDRESSES:
#src admin {
ip 1.2.3.4 1.2.3.5
user root foo bar
within workhours
#}
src clients {
ip 10.176.155.1-10.176.155.199
}
#src bar-clients {
ip 172.16.4.0/26
#}
DESTINATION CLASSES:
#dest good {
#}
#dest local {
#}
#dest adult {
domainlist adult/domains
urllist adult/urls
expressionlist adult/expressions
redirect http://admin.foo.bar.de/cgi-bin/squidGuard.cgi?clientaddr=%a+clientname=%n+clientident=%i+srcclass=%s+targetclass=%t+url=%u
#}
dest adult {
domainlist adult/domains
urllist adult/urls
expressionlist adult/expressions
redirect http://glpi.moa.dom/
log adult.log
}
dest ads {
domainlist ads/domains
urllist ads/urls
log ads.log
}
dest porn {
domainlist porn/domains
urllist porn/urls
log porn.log
}
dest warez {
domainlist warez/domains
urllist warez/urls
log warez.log
}
dest social_networks {
domainlist social_networks/domains
urllist social_networks/urls
log social.log
}
acl {
admin {
pass any
}
clients {
pass !adult !social_networks !porn !warez !ads all
}
bar-clients {
pass local none
}
default {
pass !in-addr all
rewrite dmz
redirect http://localhost/cgi-bin/squidGuard.cgi?clientaddr=%a+clientname=%n+clientident=%i+srcclass=%s+targetclass=%t+url=%u
redirect http://glpi.local.dom/
}
}
[/code]
j’ai ensuite utiliser les commandes squidGuard -c all puis squidguard -u et /etc/init.d/squid3 restart
ensuite j’ai testé avec la commande echo "http://www.fr.pornhub.com/ 10.176.155.59/- - GET" | /usr/bin/squidGuard -c /etc/squid/squidGuard.conf -d
le resultat est le suivant:
2012-11-07 15:16:25 [6312] New setting: dbhome: /var/lib/squidguard/db
2012-11-07 15:16:25 [6312] New setting: logdir: /var/log/squid
2012-11-07 15:16:25 [6312] init domainlist /var/lib/squidguard/db/adult/domains
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/adult/domains.db
2012-11-07 15:16:25 [6312] init urllist /var/lib/squidguard/db/adult/urls
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/adult/urls.db
2012-11-07 15:16:25 [6312] init expressionlist /var/lib/squidguard/db/adult/expressions
2012-11-07 15:16:25 [6312] init domainlist /var/lib/squidguard/db/ads/domains
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/ads/domains.db
2012-11-07 15:16:25 [6312] init urllist /var/lib/squidguard/db/ads/urls
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/ads/urls.db
2012-11-07 15:16:25 [6312] init domainlist /var/lib/squidguard/db/porn/domains
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/porn/domains.db
2012-11-07 15:16:25 [6312] init urllist /var/lib/squidguard/db/porn/urls
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/porn/urls.db
2012-11-07 15:16:25 [6312] init domainlist /var/lib/squidguard/db/warez/domains
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/warez/domains.db
2012-11-07 15:16:25 [6312] init urllist /var/lib/squidguard/db/warez/urls
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/warez/urls.db
2012-11-07 15:16:25 [6312] init domainlist /var/lib/squidguard/db/social_networks/domains
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/social_networks/domains.db
2012-11-07 15:16:25 [6312] init urllist /var/lib/squidguard/db/social_networks/urls
2012-11-07 15:16:25 [6312] loading dbfile /var/lib/squidguard/db/social_networks/urls.db
2012-11-07 15:16:25 [6312] squidGuard 1.4 started (1352297785.646)
2012-11-07 15:16:25 [6312] Info: recalculating alarm in 11615 seconds
2012-11-07 15:16:25 [6312] squidGuard ready for requests (1352297785.663)
2012-11-07 15:16:25 [6312] Request(clients/adult/-) http://www.fr.pornhub.com/ 10.176.155.100/- - GET REDIRECT
http://glpi.local.dom/ 10.176.155.100/- - GET
2012-11-07 15:16:25 [6312] squidGuard stopped (1352297785.664)
par contre dans mon navigateur (firefox) aucun filtrage. le site passe.
pouvez vous m’aider svp ?
Merci
luffy tux
