Bom dia!!!!
Sou novo no mundo linux e nessa lista!  
Estou configurando um proxy tranparente com squid 2.6 e bloqueio de 
sites pornograficos por black list com squidGuard, mas o squidGuard 
não bloqueia de forma alguma.

Fiz um teste com echo "http://www.sandrinha.com.br 192.168.10.134/ --
GET" |squidguard -c /etc/squid/squidGuard.conf -d e obtive a 
seguinte saida: 

2008-01-10 12:34:49 [10701] init 
domainlist /var/lib/squidguard/db/domains
2008-01-10 12:34:49 [10701] loading 
dbfile /var/lib/squidguard/db/domains.db
2008-01-10 12:34:49 [10701] init urllist /var/lib/squidguard/db/urls
2008-01-10 12:34:49 [10701] loading 
dbfile /var/lib/squidguard/db/urls.db
2008-01-10 12:34:49 [10701] squidGuard 1.2.0 started (1199975689.933)
2008-01-10 12:34:49 [10701] squidGuard ready for requests 
(1199975689.933)
2008-01-10 12:34:49 [10701] error parsing squid line: 
http://sandrinha.com.br

2008-01-10 12:34:49 [10701] squidGuard stopped (1199975689.935)

Aqui vai meu squid.conf

################################################################

#configuração do proxy transparente
http_port 3128 transparent
visible_hostname server

################################################################

#configurações do cache

#cache de memoria
cache_mem 64 MB
maximum_object_size_in_memory 96 KB

#cache de hd
cache_dir ufs /var/spool/squid 4096 16 256
maximum_object_size 120 MB

#uso do cache
cache_swap_low 90
cache_swap_high 95

#fim da configuração de cache
################################################################

#ativa o squidGuard
#url_rewrite_program /usr/bin/squidGuard -
c /etc/squid/squidGuard.conf
#url_rewrite_children 6

# Regras de acesso
# acl - Recomendadas
#*******************
#
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 # https, snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
#

# acl - Personalizadas
# Define a rede interna (Intranet)
acl workgroup src 192.168.10.0/24
#

################################################################
#Define o acesso atraves das regras criadas anteriormente

# http_access - Recomendadas
#
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports


# http_access - Personalizadas
#*****************************
http_access allow localhost
http_access allow workgroup
#

#Nega tudo que não foi liberado ou negado
http_access deny all

redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf
redirect_children 4

E agora o squidGuard.conf:

# Define a pasta onde estao as black lists
dbhome /var/lib/squidguard/db/

# Define onde serao salvos os logs de acesso
logdir /var/log/squid/

# Define a rede interna
src lan {
     ip         192.168.10.0/24
}


#define o caminho das black lists
dest porn {
        domainlist      /var/lib/squidguard/db/domains
        urllist         /var/lib/squidguard/db/urls
        redirect        http://192.168.10.33/proibido/index.html

}
#nega o acesso as listas declaradas anteriormente
acl {
        lan {
                pass     !porn all
                redirect http://192.168.10.33/proibido/index.html
        }


#define a pagina de redirecionamento em caso de bloqueio
        default {
                pass    none
                redirect http://192.168.10.33/proibido/index.html
        }
}

Estou usando Debian 4.0 stable para amd64.

Será que alguém saberia e poderia me ajudar a resolver esse 
problema?!?

Grato a todos

Responder a