Galera, estava utilizando o SQUID 2.4 STABLE1. Depois voltei ao SQUID 2.3 STABLE 5. N�o consigo fazer minhas acl's trabalharem. Estou utilizando o Conectiva 8. Tanto minhas regras de urlpath_regex quanto url_regex n�o est�o funcionando. Veja a transcri��o de um trecho do log com debug.
No caso eu fiz um teste com um usu�rio chamado 'usuario', no ip 192.168.1.31 tentando acessar o batepapo do uol. Consegui, apesar de ter colocado a palavra chave 'batepapo' como proibida. O que deve estar acontecendo? O que s�o essas mensagens : aclMatchAcl: Can't yet compare 'group_brma_download_srcdomain' ACL for '192.168.1.31' e porque ele conclui como The request GET http://batepapo.uol.com.br:80/bp/images/nsetamen.gif is ALLOWED, because it matched 'all' Veja minha configura��o de acl's : inicio da configuracao: ----------------------- acl group_brma_download_srcdomain srcdomain BRMANONE usuario acl group_brma_download_regex url_regex BRMANONE batepapo http_access deny group_brma_download_srcdomain group_brma_download_regex acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl SSL_ports port 443 563 acl Safe_ports port 80 21 443 563 70 210 1025-65535 acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow all icp_access allow all miss_access allow all ---------------------------- fim da configura��o de acl's Inicio do log (/var/log/squid/cache.log) ------------- 2002/05/28 10:39:09| aclCheckFast: list: 0x820f468 2002/05/28 10:39:09| aclMatchAclList: checking all 2002/05/28 10:39:09| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' 2002/05/28 10:39:09| aclMatchIp: '192.168.1.31' found 2002/05/28 10:39:09| aclMatchAclList: returning 1 2002/05/28 10:39:10| aclCheck: checking 'http_access deny group_brma_download_srcdomain group_brma_download_regex' 2002/05/28 10:39:10| aclMatchAclList: checking group_brma_download_srcdomain 2002/05/28 10:39:10| aclMatchAcl: checking 'acl group_brma_download_srcdomain srcdomain BRMANONE usuario' 2002/05/28 10:39:10| aclMatchAcl: Can't yet compare 'group_brma_download_srcdomain' ACL for '192.168.1.31' 2002/05/28 10:39:10| aclMatchAclList: returning 0 2002/05/28 10:39:10| aclCheck: checking 'http_access deny group_brma_download_srcdomain group_brma_download_regex' 2002/05/28 10:39:10| aclMatchAclList: checking group_brma_download_srcdomain 2002/05/28 10:39:10| aclMatchAcl: checking 'acl group_brma_download_srcdomain srcdomain BRMANONE usuario' 2002/05/28 10:39:10| aclMatchDomainList: checking 'none' 2002/05/28 10:39:10| aclMatchDomainList: 'none' NOT found 2002/05/28 10:39:10| aclMatchAclList: returning 0 2002/05/28 10:39:10| aclCheck: checking 'http_access allow manager localhost' 2002/05/28 10:39:10| aclMatchAclList: checking manager 2002/05/28 10:39:10| aclMatchAcl: checking 'acl manager proto cache_object' 2002/05/28 10:39:10| aclMatchAclList: returning 0 2002/05/28 10:39:10| aclCheck: checking 'http_access deny manager' 2002/05/28 10:39:10| aclMatchAclList: checking manager 2002/05/28 10:39:10| aclMatchAcl: checking 'acl manager proto cache_object' 2002/05/28 10:39:10| aclMatchAclList: returning 0 2002/05/28 10:39:10| aclCheck: checking 'http_access deny !Safe_ports' 2002/05/28 10:39:10| aclMatchAclList: checking !Safe_ports 2002/05/28 10:39:10| aclMatchAcl: checking 'acl Safe_ports port 80 21 443 563 70 210 1025-65535' 2002/05/28 10:39:10| aclMatchAclList: returning 0 2002/05/28 10:39:10| aclCheck: checking 'http_access deny CONNECT !SSL_ports' 2002/05/28 10:39:10| aclMatchAclList: checking CONNECT 2002/05/28 10:39:10| aclMatchAcl: checking 'acl CONNECT method CONNECT' 2002/05/28 10:39:10| aclMatchAclList: returning 0 2002/05/28 10:39:10| aclCheck: checking 'http_access allow all' 2002/05/28 10:39:10| aclMatchAclList: checking all 2002/05/28 10:39:10| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' 2002/05/28 10:39:10| aclMatchIp: '192.168.1.31' found 2002/05/28 10:39:10| aclMatchAclList: returning 1 2002/05/28 10:39:10| aclCheck: match found, returning 1 2002/05/28 10:39:10| aclCheckCallback: answer=1 2002/05/28 10:39:10| The request GET http://batepapo.uol.com.br:80/bp/images/nsetamen.gif is ALLOWED, because it matched 'all' 2002/05/28 10:39:10| aclCheckFast: list: 0x820f468 2002/05/28 10:39:10| aclMatchAclList: checking all 2002/05/28 10:39:10| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' 2002/05/28 10:39:10| aclMatchIp: '192.168.1.31' found 2002/05/28 10:39:10| aclMatchAclList: returning 1 Assinantes em 28/05/2002: 2266 Mensagens recebidas desde 07/01/1999: 168743 Historico e [des]cadastramento: http://linux-br.conectiva.com.br Assuntos administrativos e problemas com a lista: mailto:[EMAIL PROTECTED]
