On Mon, 2009-02-09 at 19:36 +0700, Ronny Haryanto wrote: > On Mon, Feb 9, 2009 at 5:48 PM, Nyoman [D] <nyo...@royalperspective.com> > wrote: > > On Mon, 2009-02-09 at 17:33 +0700, Ronny Haryanto wrote: > >> 2009/2/9 Nyoman [D] <nyo...@royalperspective.com>: > >> > 2009/02/09 18:12:22| The reply for GET http://www.fourseasons.com/ is > >> > ALLOWED, because it matched 'all' > >> > > >> > acl all src 0.0.0.0/0.0.0.0 > >> > > >> > Padahal urutan http_access nya seperti ini > >> > > >> > http_access allow white_domains > >> > http_access allow officedom > >> > http_access deny ads > >> > http_access deny porn > >> > http_access deny proxy > >> > http_access allow unlimited !black_doms > >> > http_access deny limited !rci_domain !white_domains XTIME > >> > http_access allow sunset !black_doms > >> > #http_access allow rci_only rci_domain > >> > #http_access allow limited white_domains > >> > #http_access deny black_users > >> > http_access deny all > >> > > >> > Kok squidnya sepertinya meng-ignore http_access allow sunset !black_doms > >> > ya ?? > >> > >> Tidak akan mungkin bisa membantu tanpa melihat "sunset" dan > >> "black_doms" itu definisinya seperti apa. > >> > >> Ronny > >> > > > > acl sunset src 192.168.83.0/24 > > acl black_doms dstdom_regex -i "/etc/squid/black_domains.acl" > > > > Itu config untuk acl nya pak > > Lalu requestnya dari IP berapa? dan destination URL nya apa tepatnya? > Isi /etc/squid/black_domains.acl apa? > > Ronny >
Yang request IP 192.168.83.124 ke domain fourseasons.com Isi file /etc/squid/limited_users.lst ada di sini pak : http://pastebin.com/m63c377be (tidak ada IP 192.168.83.124) Isi file /etc/squid/black_domains.acl ada di sini: http://pastebin.com/m69c6f8e0 (tidak ada domain fourseasons.com) Ini salah satu lognya: 1234168022.739 6 192.168.83.124 TCP_DENIED/403 1700 GET http://www.fourseasons.com/ - NONE/- text/html 1234168022.868 7 192.168.83.124 TCP_DENIED/403 1722 GET http://www.fourseasons.com/favicon.ico - NONE/- text/html Thanks Nyoman
signature.asc
Description: This is a digitally signed message part
