Bom seria, mas como desconhecia o comando. rsrsrers Vou tentar descobrir o que o gmail esta tentando acessar e eu não consigo ver.
obrigado 2009/5/19 Armando Barsotini Neto <[email protected]> > > > Olá... > > utilizou o SARG ? > > Não era mais facil o # tail -f /var/log/squid/access.log | grep usuário > ou IP (No momento do acesso) ??? > > Armando. > > > > 2009/5/19 Nilson Chagas <[email protected]> > > >> >> Puxa, até que enfim usei a cabeça. >> >> Zerei os logs do squid, entrei no site, utilizei o sarg, para saber o que >> estava sendo bloqueado, descobri que era www.google.com:443 >> >> Pronto, liberei, e agora tá funcionando. >> >> Fica o registro. >> >> >> On Tue, May 19, 2009 at 11:48 AM, Nilson Chagas < >> [email protected]> wrote: >> >>> Já pedi ajuda dos amigos, mas ainda não havia postado o meu conf, e agora >>> preciso de ajuda para resolver um problema. >>> >>> Está tudo funcionando, somente... a liberação do web mail da empresa que >>> utilizando o google apps, para hospedar nossos e-mails não consegui liberar. >>> O acesso pode ser feito através do redirecionamento email.biosoja.com.brou >>> acesso direto >>> mail.google.com/a/biosoja.com.br. >>> >>> Interessante que não dá o tradicional erro do squid, ele simplesmente >>> ignora, ou a tela do IE fica em branco ou diz que houve uma recusa. >>> >>> Talvez olhando as configurações alguém possa saber o que estou fazendo de >>> errado. >>> >>> ## >>> ## ACL externa autenciação nas base LDAP do PDC >>> ## >>> #external_acl_type InetGroup %LOGIN /usr/lib/squid/squid_ldap_auth -R -b >>> "dc=<dominio>" -D "cn=administrador,ou=administrador,dc=<dominio>" -w >>> "<senha>" -f >>> "(&(objectclass=person)(sAMAccountName=%v)(memberof=cn%a,cn=users,dc=biosoja,dc=matriz))" >>> -h 192.168.0.1 >>> >>> >>> ## >>> ## As linhas abaixo se referem a autenciação de usuários no AD >>> ## >>> auth_param basic program /usr/lib/squid/ldap_auth -R -b "dc=<dominio>" -D >>> "cn=Administrador,cn=Users,dc=<dominio>" -w "<senha>" -f sAMAccountName=%s >>> -h 192.168.0.1 >>> auth_param basic children 5 >>> auth_param basic realm Informe Usuario e Senha >>> auth_param basic credentialsttl 5 minutes >>> acl ldapauth proxy_auth REQUIRED # Exige autenticação >>> >>> ## >>> ## Configuração do Cache ##################################### >>> ## >>> #cache_mem 128 MB >>> cache_mem 2 MB >>> cache_swap_low 90 >>> cache_swap_high 95 >>> #maximum_object_size 4096 KB >>> maximum_object_size 8096 KB >>> #maximum_object_size_in_memory 8 kb >>> maximum_object_size_in_memory 20 kb >>> #cache_dir ufs /var/spool/squid 100 16 256 >>> cache_dir ufs /var/spool/squid 5 16 256 >>> cache_access_log /var/log/squid/access.log >>> cache_store_log /var/log/squid/store.log >>> >>> >>> ## >>> ##### ACLs (Access Control Lists) ########################### >>> ## >>> >>> acl all src all >>> >>> acl LIBERA_MSN url_regex -i "/etc/squid/sites/msn.txt" # Libera >>> MSN >>> >>> >>> acl porno url_regex -i "/etc/squid/sites/porno.txt" # Lista >>> Sites >>> acl proibidos url_regex -i "/etc/squid/sites/proibidos.txt" # Lista >>> Sites >>> acl liberados url_regex -i "/etc/squid/sites/liberados.txt" # Lista >>> Sites >>> >>> acl EMAIL dstdomain mail.google.com* -> Teste para liberar o webmail* >>> >>> acl cadastro url_regex -i "/etc/squid/sites/cadastro.txt" # >>> Lista Sites >>> acl contabilidade url_regex -i "/etc/squid/sites/contabilidade.txt" # >>> Lista Sites >>> acl faturamento url_regex -i "/etc/squid/sites/faturamento.txt" # >>> Lista Sites >>> acl financeiro url_regex -i "/etc/squid/sites/financeiro.txt" # >>> Lista Sites >>> #acl juridico url_regex -i "/etc/squid/sites/juridico.txt" # >>> Lista Sites >>> #acl logistica url_regex -i "/etc/squid/sites/logistica.txt" # >>> Lista Sites >>> acl negocio url_regex -i "/etc/squid/sites/negocio.txt" # >>> Lista Sites >>> acl industria url_regex -i "/etc/squid/sites/industria.txt" # >>> Lista Sites >>> acl eletrica url_regex -i "/etc/squid/sites/eletrica.txt" # >>> Lista Sites >>> >>> acl manager proto cache_object >>> acl localhost src 127.0.0.1/32 >>> acl to_localhost dst 127.0.0.0/8 >>> >>> ## Inicio - Permições de Rede >>> # Grupos >>> acl rede_bsdb src "/etc/squid/redes/bsdb.txt # IP do >>> servidor BSDB >>> acl rede_bsterm2 src "/etc/squid/redes/bsterm2.txt" # IP do >>> servidor BSTERM2 >>> acl rede_bsbkp src "/etc/squid/redes/bsbkp.txt" # IP do >>> servidor BSBKP >>> >>> acl rede_almoxarifado src "/etc/squid/redes/almoxarifado.txt # IPs >>> setor almoxarifado >>> acl rede_cadastro src "/etc/squid/redes/cadastro.txt" # IPs >>> setor cadastro >>> acl rede_contabilidade src "/etc/squid/redes/contabilidade.txt" # IPs >>> setor contabilidade >>> acl rede_diretoria src "/etc/squid/redes/diretoria.txt" # IPs >>> setor diretoria >>> #acl rede_eletrica src "/etc/squid/redes/eletrica.txt" # IPs >>> setor eletrica >>> acl rede_expedicao src "/etc/squid/redes/expedicao.txt" # IPs >>> setor expedicao >>> acl rede_faturamento src "/etc/squid/redes/faturamento.txt" # IPs >>> setor faturamento >>> acl rede_financeiro src "/etc/squid/redes/financeiro.txt" # IPs >>> setor financeiro >>> acl rede_foliar src "/etc/squid/redes/foliar.txt" # IPs >>> setor foliar >>> #acl rede_gestor src "/etc/squid/redes/gestor.txt" # IPs >>> setor gestor >>> #acl rede_inativo src "/etc/squid/redes/inativo.txt" # IPs >>> setor inativo >>> acl rede_juridico src "/etc/squid/redes/juridico.txt" # IPs >>> setor juridico >>> acl rede_laboratorio src "/etc/squid/redes/laboratorio.txt" # IPs >>> setor laboratorio >>> acl rede_logistica src "/etc/squid/redes/logistica.txt" # IPs >>> setor logistica >>> acl rede_manutencao src "/etc/squid/redes/manutencao.txt" # IPs >>> setor manutencao >>> acl rede_negocio src "/etc/squid/redes/negocio.txt" # IPs >>> setor negocio >>> acl rede_pcp src "/etc/squid/redes/pcp.txt" # IPs >>> setor pcp >>> acl rede_portaria src "/etc/squid/redes/portaria.txt" # IPs >>> setor portaria >>> acl rede_qualidade src "/etc/squid/redes/qualidade.txt" # IPs >>> setor qualidade >>> acl rede_recepcao src "/etc/squid/redes/recepcao.txt" # IPs >>> setor recepcao >>> acl rede_rh src "/etc/squid/redes/rh.txt" # IPs >>> setor rh >>> acl rede_seguranca src "/etc/squid/redes/seguranca.txt" # IPs >>> setor seguranca >>> acl rede_techsal src "/etc/squid/redes/techsal.txt" # IPs >>> setor techsal >>> acl rede_ti src "/etc/squid/redes/ti.txt" # IPs >>> setor ti >>> #acl rede_transporte src "/etc/squid/redes/transporte.txt" # IPs >>> setor transporte >>> # >>> >>> acl rede_interna src 192.168.0.0/24 # Range da Rede Interna >>> >>> acl usuarios proxy_auth "/etc/squid/usuarios/acesso.txt" >>> acl gestores proxy_auth "/etc/squid/usuarios/gestores.txt" >>> >>> #Bloqueio por extensoes >>> acl download urlpath_regex .avi$ .mov$ .mp3$ .wma$ .iso$ .wmv$ .jpg$ >>> >>> ## Fim - Permições de Rede >>> >>> acl SSL_ports port 443 # https >>> acl SSL_ports port 563 # snews >>> acl SSL_ports port 873 # rsync >>> acl Safe_ports port 80 # http >>> acl Safe_ports port 443 # https >>> acl Safe_ports port 70 # gopher >>> acl Safe_ports port 210 # wais >>> #acl Safe_ports port 1025-65535 # unregistered ports >>> acl Safe_ports port 280 # http-mgmt >>> acl Safe_ports port 488 # gss-http >>> acl Safe_ports port 591 # filemaker >>> acl Safe_ports port 777 # multiling http >>> acl Safe_ports port 631 # cups >>> acl Safe_ports port 873 # rsync >>> acl Safe_ports port 901 # SWAT >>> acl Safe_ports port 21 # ftp >>> acl purge method PURGE >>> acl CONNECT method CONNECT >>> acl apache rep_header Server ^Apache >>> >>> ## >>> ## HTTP ######################### >>> >>> http_port 3128 transparent >>> >>> http_access allow LIBERA_MSN >>> >>> http_access allow liberados *-> eu gostaria que ficasse aqui se >>> possivel, o webmail deve ser liberado para todos* >>> >>> http_access allow EMAIL* -> teste* >>> >>> http_access allow rede_diretoria >>> http_access deny porno >>> >>> http_access allow rede_ti >>> >>> http_access deny proibidos >>> >>> http_access allow rede_bsdb liberados >>> http_access allow rede_bsterm2 liberados >>> http_access allow rede_bsbkp liberados >>> >>> http_access allow rede_cadastro cadastro >>> http_access allow rede_cadastro !cadastro >>> http_access allow rede_contabilidade contabilidade >>> http_access allow rede_contabilidade !contabilidade >>> http_access allow rede_faturamento faturamento >>> http_access allow rede_faturamento !faturamento >>> http_access allow rede_financeiro financeiro >>> http_access allow rede_financeiro !financeiro >>> http_access allow rede_juridico !proibidos >>> http_access allow rede_logistica !proibidos >>> http_access allow rede_negocio negocio >>> http_access deny rede_negocio !negocio >>> >>> http_access allow gestores >>> http_access deny download >>> http_access allow rede_interna ldapauth liberados >>> >>> http_access allow manager localhost >>> http_access deny manager >>> http_access allow purge localhost >>> http_access deny purge >>> http_access deny !Safe_ports >>> http_access deny CONNECT !SSL_ports >>> http_access allow localhost >>> http_access deny all >>> >>> ## >>> ## PROXY REVERSO ################## >>> ## >>> #httpd_accel_host 192.168.0.7 >>> #httpd_accel_port 3128 >>> #httpd_accel_single_host on >>> #httpd_accel_uses_host_header off >>> >>> ## >>> ## ICP ############################ >>> ## >>> #icp_access allow localnet >>> icp_access allow rede_interna >>> icp_access deny all >>> >>> ## >>> ## REFRESH ######################## >>> ## >>> refresh_pattern ^ftp: 1440 20% 10080 >>> refresh_pattern ^gopher: 1440 0% 1440 >>> refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 >>> refresh_pattern . 0 20% 4320 >>> >>> >>> ## >>> ## OUTRAS CONFIGURAÇÔES ############ >>> ## >>> hierarchy_stoplist cgi-bin ? >>> access_log /var/log/squid/access.log squid >>> broken_vary_encoding allow apache >>> extension_methods REPORT MERGE MKACTIVITY CHECKOUT >>> hosts_file /etc/hosts >>> coredump_dir /var/spool/squid >>> >>> >>> -- >>> []s >>> Nilson Chagas - Ubuntu User 25794 >>> --- >>> Visite: >>> http://www.amados.com.br/podcast -> Peça gratuitamente um curso Bíblico >>> http://tempodesalvacao.blogspot.com/ >>> http://bbnradio.org/ -> Ouça a rádio e faça gratuitamente um Curso >>> Biblico >>> >>> >>> >> >> >> -- >> []s >> Nilson Chagas - Ubuntu User 25794 >> --- >> Visite: >> http://www.amados.com.br/podcast -> Peça gratuitamente um curso Bíblico >> http://tempodesalvacao.blogspot.com/ >> http://bbnradio.org/ -> Ouça a rádio e faça gratuitamente um Curso >> Biblico >> >> >> > > -- []s Nilson Chagas - Ubuntu User 25794 --- Visite: http://www.amados.com.br/podcast -> Peça gratuitamente um curso Bíblico http://tempodesalvacao.blogspot.com/ http://bbnradio.org/ -> Ouça a rádio e faça gratuitamente um Curso Biblico
