At 12/4/00Monday05:06 PM, Jack wilson wrote:
>acl blockedsites url_regex "/usr/local/etc/block.txt"
>acl all scr 0.0.0.0/0.0.0.0
>acl manager proto cache_object
>acl localhost scr 127.0.0.1/255/255/255/255
>acl SSL_ports port 443 563
>aclSafe_ports port 80 21 442 563 70 210 1025-65535
>aclSafe_ports port 280 # http-mgmt
>aclSafe_ports port 488 # gss-http
>aclSafe_ports port 591 # filemaker
>aclSafe_ports port 777 # multiling http
>acl CONNECT method CONNECT
>http_access deny blockedsites
>http_access allow manager localhost
>http_access deny manager
>http_access deny !Safe_ports
>http_access deny CONNECT !SSL_ports
>http_access allow localhost
>http_access allow all
coba tambahkan range ip network anda dalam acl,
sehingga tidak menjadi open proxy :-)
misalnya network range anda dari ip 192.168.0.1-192.168.0.20
maka sbb :
acl blockedsites url_regex "/usr/local/etc/block.txt"
acl all scr 0.0.0.0/0.0.0.0
## tambahkan ini
acl localnetwork 192.168.0.1-192.168.0.20/255.255.255.255
acl manager proto cache_object
##
acl localhost scr 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
aclSafe_ports port 80 21 442 563 70 210 1025-65535
aclSafe_ports port 280 # http-mgmt
aclSafe_ports port 488 # gss-http
aclSafe_ports port 591 # filemaker
aclSafe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access deny blockedsites
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
##
http_access allow localnetwork
## rubah default all access menjadi deny
http_access deny all
Salam,
--
Asfihani - UIN 85858803
--------------------------------------------------------------------------
Utk berhenti langganan, kirim email ke [EMAIL PROTECTED]
Dapatkan FAQ milis dg mengirim email kosong ke [EMAIL PROTECTED]
Informasi arsip di http://www.linux.or.id/milis.php3
Pengelola dapat dihubungi lewat [EMAIL PROTECTED]
