[help] blok akses pakai squid ???

Diskusi tentang Ubuntu Server baik webserver, database server, samba server dan service lainnya serta jaringan menggunakan Sistem Operasi Ubuntu.
User avatar
upik
Posts: 99
Joined: 05 Jun 2010, 14:52

[help] blok akses pakai squid ???

Postby upik » 02 Sep 2010, 16:32

dear ubuntu forum

saya lagi kesulitan mau blok akses dengan ketentuan yang bertingkat, sebagai contoh :
-VVIP boleh akses kemana saja
-VIP hanya boleh akses di web tertentu
-Staff lebih terbatas lagi

tapi setelah saya buat ketentuannya seperti dibawah ini, kok yang VIP dan Staff tetep bisa browsing kemana aja ya ??

mestinya vip bisa akses gmail dan yahoo saja staff cuma bisa akses gmail saja

pengaturannya dibawah ini :

acl apache rep_header Server ^Apache
acl Sosial-Network url_regex -i facebook twitter friendster meebo indowebster.com youtube.com
acl Waktu-kerja time MTWHF 05:30-23:30
acl Web-akses1 dstdom_regex -i google gmail yahoo id.yahoo.com
acl web-akses2 dstdom_regex -i gmail
#acl Waktu-kerja time MTWHF 11:31-23:50

acl VVIP src 192.168.70.1-192.168.70.4 192.168.70.6-192.168.70.10 192.168.70.16 192.168.70.249
acl All-Website dst 0.0.0.0/0.0.0.0
acl VIP src 192.168.70.5 192.168.70.12-192.168.70.13 192.168.70.17 192.168.70.22 192.168.70.27-192.168.70.28 192.168.70.40-192.168.70.41
acl Staff src 192.168.70.14-192.168.70.15 192.168.70.20 192.168.70.23-192.168.70.26 192.168.70.30
acl To-Lokal-Server dst 202.127.107.226-202.127.107.230 202.51.103.114-202.51.103.118

acl Webmin port 10000
acl File-Mutimedia url_regex -i \.3gp$ \.ac3$ \.aif$ \.aifc$ \.aiff$ \.asf$ \.au$ \.avi$ \.dat$ \.div$ \.divx$ \.dts$ \.dvr-ms$ \.flv$ \.m1v$ \.m2v$ \.mid$ \.midi$ \.mkv$ \.mp2$ \.mp2v$ \.mp3$ \.mp4$ \.mpa$ \.mpe$ \.mpeg$ \.mpg$ \.mpv2$ \.qt$ \.ram$ \.raw$ \.rm$ \.rmi$ \.rmvb$ \.snd$ \.vob$ \.vqf$ \.vro$ \.wav$ \.wma$ \.wmv$ \.rar$
acl File-Pics url_regex -i \.srf$ \.tga$ \.tif$ \.tiff$ \.tif$ \.ttf$ \.hdf$ \.wbmp$ \.wmf$ \.x3f$ \.xbm$ \.xpm$ \.cr2$ \.crw$ \.dcr$ \.djvu$ \.emf$ \.eps$ \.fpx$ \.icl$ \.icn$ \.iff$ \.jp2$ \.jpc$ \.mrw$ \.nef$ \.orf$ \.pbm$ \.pcd$ \.pcx$ \.pef$ \.pgm$ \.pic$ \.pict$ \.plp$ \.ppm$ \.psd$ \.psp$ \.raf$ \.ras$ \.raw$ \.rs$ \.sgi$
acl File-Execute url_regex -i \.exe$ \.msi$ \.rpm$ \.bin$
acl Web-Proxy dstdom_regex -i \.srf$ \.tga$ \.tif$ \.tiff$ \.tif$ \.ttf$ \.hdf$ \.wbmp$ \.wmf$ \.x3f$ \.xbm$ \.xpm$ \.cr2$ \.crw$ \.dcr$ \.djvu$ \.emf$ \.eps$ \.fpx$ \.icl$ \.icn$ \.iff$ \.jp2$ \.jpc$ \.mrw$ \.nef$ \.orf$ \.pbm$ \.pcd$ \.pcx$ \.pef$ \.pgm$ \.pic$ \.pict$ \.plp$ \.ppm$ \.psd$ \.psp$ \.raf$ \.ras$ \.raw$ \.rs$ \.sgi$
acl Web-Sering dstdom_regex -i my.mail.ru
acl Web-Refresh dstdom_regex -i facebook.com detik.com livescores.com
acl Streaming url_regex youtube
acl Other dstdom_regex -i livescore
acl Porn-url url_regex -i [hard|soft]core adult ^anal amateur bigdicks bigtits bisexual bizarre blonde blowjob bondage cumshot fetish fuck gangbang ^gay$ handjob hentai lesbian mature milf **** oral pissing porn pussy *** shemale teens wild xxx sleazydream.com youtube.com redtube

cache deny QUERY Web-Refresh

http_access allow VVIP
http_access deny Porn-url
http_access deny !Safe_ports
http_access deny File-Execute
http_access deny Web-Proxy
http_access deny Other
http_access allow !Waktu-kerja
http_access allow VIP
http_access allow Web-akses1
http_access allow Staff
http_access allow Web-akses2
#http_access deny !Waktu-kerja
http_access deny Streaming
http_access allow Webmin
http_access allow To-Lokal-Server
http_access deny All-Website
http_access deny all
broken_vary_encoding allow apache


semoga ada yang mau membantu

tks sebelumnya
User avatar
Rh354
Posts: 718
Joined: 14 Mar 2010, 19:56
Location: between the truth and the lies
Contact:

Re: [help] blok akses pakai squid ???

Postby Rh354 » 29 Nov 2010, 10:21

squid itu membaca dari atas ke bawah...coba liat squid.conf

Return to “Ubuntu Server”

Who is online

Users browsing this forum: No registered users and 4 guests