[LinuxFocus-icon]
锟斤拷页  |  站锟斤拷锟酵�  |  锟斤拷锟斤拷  |  锟斤拷锟斤拷
锟斤拷锟斤拷 | 锟斤拷锟斤拷锟节匡拷 | 锟斤拷锟斤拷 | 锟斤拷锟斤拷LF
This document is available in: English  Castellano  ChineseGB  Deutsch  Francais  Italiano  Nederlands  Russian  Turkce  

[DSOberoi]
by D.S. Oberoi
<ds_oberoi(at)yahoo.com>

锟斤拷锟斤拷锟斤拷锟斤拷:
D.S. Oberoi 锟斤拷锟斤拷锟斤拷印锟饺碉拷 Jammu,印锟斤拷目前锟斤拷锟斤拷锟斤拷锟街斤拷锟脚ｏ拷锟秸憋拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 Internet锟斤拷
目录:

 

锟斤拷锟斤拷 Squid 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷

[squid]

摘要:

Linux 目前锟窖撅拷锟金步筹拷为锟斤拷锟斤拷锟酵拷锟绞★拷锟斤拷锟斤拷锟斤拷锟节办公锟斤拷锟斤拷锟斤拷锟秸筹拷锟斤拷庭锟斤拷锟斤拷为锟侥硷拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷印锟斤拷锟斤拷锟斤拷锟斤拷
锟绞硷拷锟斤拷锟斤拷锟斤拷锟皆硷拷应锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷使锟矫ｏ拷 锟斤拷锟斤拷锟斤拷锟斤拷为锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷使锟矫★拷
一台锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷通锟斤拷一锟斤拷Internet锟斤拷锟斤拷锟斤拷同一时锟斤拷为锟斤拷同锟斤拷锟矫伙拷锟结供Internet锟斤拷锟绞凤拷锟今。好的达拷锟斤拷锟斤拷
锟斤拷锟斤拷同时锟斤拷为锟斤拷锟斤拷锟斤拷锟斤拷锟结供锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟斤拷锟斤拷胤锟斤拷锟斤拷锟斤拷蟮酱锟绞憋拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷诨锟斤拷锟斤拷录锟斤拷锟�
锟斤拷锟斤拷锟斤拷锟斤拷同锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷校锟斤拷锟接伙拷锟斤拷锟叫帮拷锟斤拷锟斤拷直锟接伙拷锟酵碉拷锟酵伙拷锟剿ｏ拷锟接讹拷锟斤拷锟教凤拷锟斤拷WEB锟斤拷时锟戒并锟斤拷锟斤拷锟斤拷锟�
锟斤拷压锟斤拷锟斤拷
Squid 锟斤拷一锟斤拷支锟斤拷Proxy锟斤拷HTTP锟斤拷锟芥、Ftp锟斤拷Gopher 锟饺等碉拷锟斤拷锟斤拷锟斤拷锟斤拷也支锟斤拷SSL锟斤拷锟斤拷锟绞匡拷锟狡★拷DNS锟斤拷锟芥并锟斤拷为
锟斤拷锟叫碉拷锟斤拷锟斤拷锟斤拷锟斤拷录锟斤拷Squid 锟斤拷 Windows NT 锟斤拷也锟斤拷锟矫ｏ拷锟斤拷锟� Logi Sense.

锟斤拷锟侥碉拷锟截碉拷锟斤拷为锟斤拷锟斤拷一台锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷为锟矫伙拷锟结供锟缴控凤拷锟斤拷锟结供锟斤拷锟斤拷锟斤拷指锟斤拷锟斤拷

 

Squid 锟窖撅拷锟斤拷装锟斤拷锟斤拷

Squid 锟斤拷 rpm 锟侥硷拷锟窖撅拷锟斤拷 RedHat 7.1 锟斤拷锟斤拷锟斤拷锟剿ｏ拷锟节帮拷装系统锟斤拷时锟斤拷锟斤拷锟斤拷锟� Networks 选锟斤拷锟斤拷选锟叫碉拷
锟斤拷锟斤拷锟斤拷锟斤拷锟皆讹拷锟斤拷装锟斤拷系统锟较★拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟较低筹拷锟斤拷欠锟斤拷丫锟斤拷锟阶帮拷锟� Squid锟斤拷 
rpm -q squid
Squid 锟斤拷锟斤拷锟铰版本锟斤拷锟斤拷锟斤拷 Squid 锟斤拷页 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷站锟斤拷锟矫碉拷锟斤拷 Squid 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟筋安装锟斤拷系统锟较ｏ拷 
rpm -ivh squid-2.3.STABLE4-10.i386.rpm
 

锟斤拷锟斤拷 Squid

Squid 锟侥讹拷锟斤拷锟斤拷通锟斤拷锟洁辑锟斤拷锟斤拷锟斤拷锟斤拷锟侥硷拷 squid.conf 锟斤拷实锟街的ｏ拷squid.conf 锟侥硷拷通锟斤拷锟斤拷 /etc/squid 目录
锟铰★拷锟斤拷锟斤拷锟斤拷锟斤拷募锟斤拷锟斤拷莺芏啵拷锟斤拷锟斤拷锟斤拷锟斤拷锟矫匡拷锟窖★拷疃硷拷锟斤拷昃★拷锟剿碉拷锟斤拷锟�

锟斤拷锟斤拷要锟睫改碉拷锟斤拷 http_port锟斤拷锟斤拷锟窖★拷锟街革拷锟斤拷锟� Squid 锟斤拷锟斤拷锟酵伙拷锟斤拷锟斤拷亩丝冢锟侥拷锟街碉拷锟� 3128锟斤拷要使锟矫达拷锟斤拷
锟斤拷锟杰ｏ拷锟斤拷锟斤拷丝锟街狄拷锟斤拷锟斤拷锟� Squid 锟侥伙拷锟斤拷锟斤拷 IP 锟斤拷址一锟斤拷使锟矫ｏ拷锟斤拷锟斤拷锟睫改筹拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷

http_port 192.168.0.1:8080

锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷示 Squid 锟斤拷锟斤拷 IP 锟斤拷址 192.168.0.1 锟较ｏ拷锟剿匡拷为 8080锟斤拷锟剿口匡拷锟斤拷锟斤拷锟斤拷为锟斤拷锟斤拷值锟斤拷锟斤拷要确锟斤拷
没锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟绞癸拷锟酵拷锟斤拷亩丝凇锟斤拷锟斤拷锟斤拷姆锟斤拷锟斤拷锟斤拷锟侥端匡拷锟斤拷锟斤拷也锟斤拷锟斤拷锟斤拷为锟斤拷锟狡碉拷锟斤拷锟矫★拷  

锟斤拷锟绞匡拷锟斤拷

使锟矫凤拷锟绞匡拷锟斤拷锟斤拷锟皆ｏ拷锟斤拷锟皆匡拷锟斤拷锟节凤拷锟斤拷时锟斤拷锟斤拷锟截讹拷锟斤拷时锟斤拷锟斤拷锟斤拷锟叫伙拷锟芥、锟斤拷锟斤拷锟截讹拷站锟斤拷锟揭伙拷锟秸撅拷锟饺等★拷 Squid 锟斤拷锟绞匡拷锟斤拷锟斤拷锟斤拷锟斤拷要锟截ｏ拷ACL 元锟截猴拷 锟斤拷锟斤拷锟叫憋拷锟斤拷锟斤拷锟斤拷锟叫憋拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷芫锟侥承╋拷没锟斤拷源朔锟斤拷锟侥凤拷锟绞★拷

锟斤拷锟斤拷锟叫筹拷一些锟斤拷要锟斤拷 ACL 元锟斤拷锟斤拷锟斤拷
为锟斤拷使锟矫匡拷锟狡癸拷锟杰ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 ACL 锟斤拷锟斤拷应锟矫★拷ACL 锟斤拷锟斤拷锟侥革拷式锟斤拷锟铰ｏ拷

acl   acl_element_name   type_of_acl_element values_to_acl

注锟斤拷
  1. acl_element_name 锟斤拷锟斤拷锟斤拷锟斤拷一锟斤拷锟斤拷 ACL 锟叫讹拷锟斤拷锟斤拷锟斤拷啤锟�
  2. 锟轿猴拷锟斤拷锟斤拷 ACL 元锟截诧拷锟斤拷锟斤拷锟斤拷同锟斤拷锟斤拷锟街★拷
  3. 每锟斤拷 ACL 锟斤拷锟叫憋拷值锟斤拷伞锟斤拷锟斤拷锟斤拷锟狡ワ拷锟斤拷锟斤拷时锟津，讹拷锟街碉拷锟斤拷呒锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷樱锟斤拷锟斤拷锟街拷锟斤拷锟斤拷锟揭� ACL
    元锟截碉拷值锟斤拷匹锟戒，锟斤拷锟斤拷锟� ACL 元锟截硷拷锟斤拷匹锟戒。
  4. 锟斤拷锟斤拷锟斤拷锟斤拷锟叫碉拷 ACL 元锟截讹拷锟斤拷使锟矫凤拷锟斤拷锟叫憋拷锟叫碉拷全锟斤拷锟斤拷锟酵★拷
  5. 锟斤拷同锟斤拷 ACL 元锟斤拷写锟节诧拷同锟斤拷锟叫ｏ拷Squid 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟斤拷斜锟斤拷小锟�
锟斤拷锟角匡拷锟斤拷使锟斤拷锟斤拷锟洁不同锟侥凤拷锟斤拷锟斤拷目锟斤拷锟斤拷锟斤拷锟叫筹拷锟斤拷锟角斤拷要锟矫碉拷锟侥硷拷锟斤拷锟斤拷 锟斤拷锟斤拷锟叫憋拷锟侥癸拷锟斤拷锟斤拷一些锟斤拷锟斤拷 'allow' 锟斤拷 'deny' 锟侥关硷拷锟街癸拷锟缴ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷芫锟斤拷锟斤拷囟锟斤拷锟揭伙拷锟� ACL 元锟斤拷锟结供锟斤拷锟斤拷
注锟斤拷
  1. 锟斤拷些锟斤拷锟斤拷锟斤拷锟斤拷锟角碉拷锟斤拷锟斤拷顺锟斤拷锟斤拷锟狡ワ拷锟斤拷猓伙拷锟斤拷锟解到匹锟斤拷墓锟斤拷锟狡ワ拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
  2. 一锟斤拷锟斤拷锟斤拷锟叫憋拷锟斤拷锟斤拷锟街讹拷锟斤拷锟斤拷锟斤拷锟斤拷伞锟�
  3. 锟斤拷锟矫伙拷锟斤拷魏喂锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷匹锟戒，默锟较讹拷锟斤拷锟斤拷锟斤拷锟叫憋拷锟斤拷锟斤拷锟揭伙拷锟斤拷锟斤拷锟斤拷应锟斤拷
  4. 一锟斤拷锟斤拷锟斤拷锟斤拷目锟叫碉拷锟斤拷锟斤拷元锟截斤拷锟斤拷锟竭硷拷锟斤拷锟斤拷锟斤拷锟斤拷锟接ｏ拷
    http_access Action 锟斤拷锟斤拷1 AND 锟斤拷锟斤拷2 AND 锟斤拷锟斤拷 OR.
    http_access Action 锟斤拷锟斤拷3
    锟斤拷锟� http_access 锟斤拷锟斤拷锟斤拷锟矫伙拷锟斤拷锟斤拷锟斤拷锟接ｏ拷锟斤拷每锟斤拷锟斤拷锟斤拷锟斤拷目锟斤拷元锟截硷拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟接★拷
  5. 锟斤拷锟阶★拷斜锟斤拷械墓锟斤拷锟斤拷锟斤拷锟斤拷锟窖拷锟斤拷隙锟斤拷碌锟剿筹拷锟�
 

锟截碉拷锟斤拷锟斤拷 Squid

Squid 默锟较诧拷锟斤拷锟轿猴拷锟矫伙拷锟斤拷锟绞匡拷锟狡★拷锟斤拷要锟斤拷锟斤拷某锟斤拷锟斤拷锟绞ｏ拷锟斤拷锟斤拷锟斤拷卸锟斤拷乒锟斤拷锟斤拷锟� squid.conf 锟斤拷 http_access deny 锟斤拷前锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟街ｏ拷

acl mynetwork 192.168.0.1/255.255.255.0
http_access allow mynetwork

mynetwork 锟斤拷 acl 锟斤拷锟狡ｏ拷锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟截讹拷 acl 锟斤拷锟斤拷 mynetwork 锟斤拷 锟侥癸拷锟斤拷192.168.0.1 指锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷为 255.255.255.0 锟斤拷锟斤拷锟斤拷锟斤拷mynetwork 锟斤拷要锟斤拷为锟剿革拷锟斤拷锟斤拷锟斤拷锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟叫�
锟斤拷锟斤拷锟斤拷锟斤拷 http 锟斤拷锟斤拷锟斤拷锟斤拷锟睫革拷锟斤拷锟� http_port 锟酵匡拷锟斤拷锟斤拷 Squid 锟杰好的癸拷锟斤拷锟斤拷锟斤拷锟剿★拷 锟睫革拷锟斤拷珊锟絊quid
锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷

service squid start

注锟斤拷
Squid 也锟斤拷锟斤拷锟斤拷系统锟斤拷锟斤拷锟斤拷时锟斤拷锟皆讹拷锟斤拷锟叫ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷 ntsysv 锟斤拷 setup锟斤拷系统锟斤拷锟斤拷说锟斤拷锟斤拷写锟� Squid锟斤拷锟斤拷
锟斤拷锟斤拷锟斤拷锟侥硷拷锟斤拷锟斤拷锟轿何革拷锟斤拷之锟襟，碉拷前锟斤拷锟斤拷锟叫碉拷 Squid 锟斤拷锟教憋拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟缴ｏ拷
  1. service squid restart 锟斤拷
  2. /etc/rc.d/init.d/squid restart
 

锟斤拷锟矫客伙拷锟斤拷

锟斤拷锟节客伙拷锟剿碉拷锟斤拷锟斤拷锟斤拷锟酵碉拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟截讹拷锟剿口的ｏ拷锟斤拷耍锟斤拷突锟斤拷锟揭惨拷锟斤拷锟接︼拷锟斤拷谩锟斤拷诩锟斤拷锟斤拷锟揭伙拷锟街帮拷锟斤拷锟�
确锟斤拷要锟斤拷锟绞达拷锟斤拷锟斤拷锟斤拷锟斤拷锟侥客伙拷锟斤拷锟窖撅拷锟斤拷锟斤拷锟节撅拷锟斤拷锟斤拷锟叫诧拷锟窖凤拷锟斤拷锟斤拷锟斤拷效锟斤拷 IP 锟斤拷址锟斤拷锟斤拷确锟斤拷锟斤拷锟角讹拷锟斤拷 ping 通
锟斤拷锟斤拷锟斤拷 Squid 锟斤拷 Linux 锟斤拷锟斤拷锟斤拷锟斤拷
锟斤拷 Internet Explorer 锟铰碉拷锟斤拷锟矫ｏ拷
  1. 锟斤拷锟斤拷说锟斤拷系锟� 锟斤拷锟斤拷 -> Internet 选锟斤拷
  2. 选锟斤拷 锟斤拷锟斤拷 锟斤拷锟斤拷锟斤拷 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
  3. 选锟斤拷 使锟矫达拷锟斤拷锟斤拷锟斤拷锟斤拷 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 IP 锟斤拷址锟酵端口★拷

锟斤拷 Netscape Navigator 锟铰碉拷锟斤拷锟矫ｏ拷
  1. 锟斤拷锟斤拷说锟斤拷系谋嗉拷锟紼dit锟斤拷->锟斤拷选锟筋（Preference锟斤拷->锟竭硷拷锟斤拷Advanced锟斤拷->锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷Proxies锟斤拷锟斤拷
  2. 选锟斤拷锟街讹拷锟斤拷锟矫达拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷Manual Proxy Configuration锟斤拷锟斤拷
  3. 锟斤拷锟斤拷榭达拷锟絍iew锟斤拷 锟斤拷
  4. 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 IP 锟斤拷址锟酵端口★拷
 

使锟矫凤拷锟绞匡拷锟斤拷

锟斤拷锟斤拷锟斤拷士锟斤拷萍锟斤拷锟斤拷锟斤拷为锟酵伙拷锟剿凤拷锟绞匡拷锟斤拷锟结供锟斤拷一锟斤拷锟斤拷锟侥伙拷锟狡★拷锟斤拷锟斤拷锟斤拷锟酵拷锟斤拷锟斤拷玫锟斤拷锟斤拷锟斤拷樱锟�
  1. 锟斤拷锟斤拷锟叫憋拷锟叫的伙拷锟斤拷锟斤拷锟斤拷 Internet锟斤拷

    acl allowed_clients src 192.168.0.10 192.168.0.20 192.168.0.30
    http_access allow allowed_clients
    http_access deny !allowed_clients

    锟斤拷锟斤拷锟斤拷锟街伙拷锟斤拷锟� IP 锟斤拷址为 192.168.0.10锟斤拷192.168.0.20 锟斤拷 192.168.0.30 锟侥伙拷锟斤拷
    锟斤拷锟斤拷 Internet锟斤拷锟斤拷锟斤拷 IP 锟斤拷址锟侥伙拷锟斤拷锟津都憋拷锟杰撅拷锟斤拷锟绞★拷


  2. 锟斤拷锟狡凤拷锟斤拷时锟轿★拷

    acl allowed_clients src 192.168.0.1/255.255.255.0
    acl regular_days time MTWHF 10:00-16:00
    http_access allow allowed_clients regular_days
    http_access deny !allowed_clients

    锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟�192.168.0.1锟叫碉拷锟斤拷锟叫客伙拷锟斤拷锟斤拷锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟�10:00锟斤拷锟斤拷锟斤拷4:00
    锟斤拷锟斤拷 Internet锟斤拷


  3. 为锟斤拷同锟侥客伙拷锟斤拷锟斤拷锟戒不同锟侥凤拷锟斤拷时锟轿★拷

    acl hosts1 src192.168.0.10
    acl hosts2 src 192.168.0.20
    acl hosts3 src 192.168.0.30
    acl morning time 10:00-13:00
    acl lunch time 13:30-14:30
    acl evening time 15:00-18:00
    http_access allow host1 morning
    http_access allow host1 evening
    http_access allow host2 lunch
    http_access allow host3 evening
    http_access deny all

    锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷校锟斤拷锟斤拷锟� host1 锟斤拷锟斤拷锟斤拷 morning 锟斤拷 evening 时锟轿凤拷锟斤拷 Internet锟斤拷锟斤拷锟斤拷
    host2 锟斤拷 host3 锟街憋拷只锟斤拷锟斤拷 lunch 锟斤拷 evening 时锟轿凤拷锟斤拷 Internet锟斤拷

    注锟斤拷
    一锟斤拷锟斤拷锟斤拷锟斤拷目锟斤拷锟斤拷锟叫碉拷元锟斤拷之锟斤拷锟斤拷锟斤拷锟斤拷锟姐按锟斤拷锟斤拷锟斤拷式锟斤拷锟斤拷 锟斤拷

    http_access Action statement1 AND staement2 AND statement OR.

    锟斤拷锟� http_access 锟斤拷锟斤拷之锟斤拷锟矫伙拷锟斤拷锟斤拷锟斤拷锟接讹拷每锟斤拷锟斤拷锟斤拷锟斤拷目锟叫碉拷元锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟接ｏ拷锟斤拷
    锟铰ｏ拷

    http_access allow host1 morning evening

    锟睫凤拷锟斤拷时锟斤拷 morning 锟斤拷时锟斤拷 evening 同时锟斤拷锟斤拷(morning AND evening )锟斤拷锟斤拷锟斤拷锟斤拷锟�
    式锟斤拷锟斤拷锟结返锟斤拷锟斤拷值锟斤拷TRUE锟斤拷锟斤拷锟接讹拷锟斤拷锟斤拷锟侥匡拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷魏味锟斤拷锟斤拷锟�


  4. 站锟斤拷锟斤拷锟斤拷
    Squid 锟斤拷锟斤拷锟斤拷锟斤拷某些锟截讹拷站锟斤拷锟斤拷锟侥承╋拷囟锟斤拷执实锟秸撅拷恪ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷锟侥癸拷锟斤拷实锟街ｏ拷

    acl allowed_clients src 192.168.0.1/255.255.255.0
    acl banned_sites url_regex abc.com *()(*.com
    http_access deny banned_sites
    http_access allow allowed_clients

    也锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟轿猴拷锟斤拷某些锟截讹拷锟街词ｏ拷锟斤拷锟斤拷说 dummy锟斤拷fake锟斤拷锟斤拷站锟斤拷

    acl allowed_clients src 192.168.0.1/255.255.255.0
    acl banned_sites url_regex dummy fake
    http_access deny banned_sites
    http_access allow allowed_machibes

    锟斤拷实锟斤拷应锟斤拷锟叫ｏ拷锟斤拷锟斤拷要锟斤拷锟斤拷锟斤拷锟轿碉拷锟斤拷锟斤拷站锟斤拷锟斤拷执识锟斤拷锟斤拷锟斤拷锟斤拷妫拷锟斤拷锟斤拷缺锟斤拷锟斤拷锟揭伙拷锟斤拷募锟�
    锟叫ｏ拷锟斤拷榭� /etc 目录锟叫碉拷 banned.list锟侥硷拷锟斤拷ACL 锟斤拷锟斤拷锟斤拷锟斤拷募锟斤拷卸锟斤拷锟斤拷锟斤拷锟斤拷锟较拷锟斤拷锟�
    锟斤拷锟轿憋拷锟斤拷止锟斤拷站锟姐。

    acl allowed_clients src 192.168.0.1/255.255.255.0
    acl banned_sites url_regex "/etc/banned.list"
    http_access deny banned_sites
    http_access allow allowed_clients

  5. 锟脚伙拷
    Squid 锟斤拷锟斤拷通锟斤拷使锟斤拷 maxconn 元锟斤拷锟斤拷锟斤拷锟狡客伙拷锟斤拷锟斤拷锟接碉拷锟斤拷目锟斤拷 要使锟斤拷锟斤拷锟窖★拷睿拷锟斤拷锟�
    锟斤拷锟斤拷锟斤拷 client_db锟斤拷

    acl mynetwork 192.168.0.1/255.255.255.0
    acl numconn maxconn 5
    http_access deny mynetwork numconn

    注锟斤拷
    maxconn ACL 使锟斤拷小锟节ｏ拷less-than锟斤拷锟皆比★拷锟斤拷 ACL 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟借定值时锟斤拷匹锟戒。
    锟斤拷锟斤拷 ACL 锟斤拷锟斤拷 http_access 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟矫碉拷锟斤拷要原锟斤拷


  6. 锟斤拷锟斤拷锟斤拷锟斤拷
    锟斤拷锟节撅拷态页锟芥，锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷芄锟斤拷锟斤拷袒锟斤拷偷锟斤拷锟斤拷锟斤拷锟斤拷锟侥客伙拷锟剿★拷没锟叫憋拷要去锟斤拷锟斤拷 cgi-bin
    锟斤拷 Servlet锟斤拷锟斤拷些锟斤拷锟斤拷锟斤拷 ACL 元锟斤拷 no_cache 锟斤拷锟斤拷止锟斤拷

    acl cache_prevent1 url_regex cgi-bin /?
    acl cache_prevent2 url_regex Servlet
    no_cache deny cache_prevent1
    no_cache deny cache_prevent2

  7. 锟皆讹拷锟斤拷锟斤拷锟斤拷锟斤拷息
    锟斤拷锟斤拷锟矫拒撅拷锟斤拷锟斤拷锟� deny_info 选锟斤拷锟斤拷锟皆讹拷锟斤拷锟斤拷锟斤拷锟斤拷息锟斤拷Squid 默锟较的达拷锟斤拷锟斤拷息锟斤拷锟斤拷
    /etc/squid/errors 目录锟叫★拷锟斤拷锟侥柯硷拷锟斤拷锟斤拷锟� error_directory 选锟斤拷指锟斤拷锟斤拷锟斤拷也锟斤拷锟斤拷
    锟斤拷锟斤拷锟街达拷拇锟斤拷锟斤拷锟斤拷锟较拷锟�

    acl allowed_clients src 192.168.0.1/255.255.255.0
    acl banned_sites url_regex abc.com *()(*.com
    http_access deny banned_sites
    deny_info ERR_BANNED_SITE banned_sites
    http_access allow allowed_clients

    锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷校锟斤拷锟斤拷没锟斤拷锟酵硷拷锟斤拷时锟斤拷锟街癸拷锟秸撅拷锟绞憋拷锟斤拷锟斤拷锟斤拷锟绞疽伙拷锟斤拷锟斤拷频锟斤拷锟较拷锟�
    ERR_BANNED_SITE 选锟斤拷锟叫碉拷锟侥硷拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟侥达拷锟斤拷锟斤拷息锟斤拷目录锟叫★拷锟斤拷锟斤拷锟斤拷息锟斤拷锟斤拷锟斤拷 HTML 锟斤拷
    式锟侥★拷锟斤拷锟斤拷锟叫筹拷锟斤拷 ACL 锟斤拷一些选锟筋，锟斤拷锟斤拷锟皆参匡拷 Squid 锟斤拷页锟较碉拷 FAQ 锟侥碉拷 锟皆伙拷锟绞癸拷锟� ACL
    锟斤拷锟斤拷锟斤拷锟较拷锟�
 

锟斤拷志

Squid 锟斤拷锟斤拷锟斤拷锟斤拷志锟侥硷拷锟斤拷锟斤拷锟斤拷锟� /var/log/squid 目录锟叫ｏ拷锟叫伙拷锟斤拷锟斤拷志锟斤拷锟斤拷锟斤拷锟斤拷志锟斤拷 store.log锟侥硷拷锟斤拷锟斤拷
锟斤拷 access.log 锟斤拷录锟斤拷锟叫关客伙拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟接活动锟斤拷每锟斤拷 HTTP & ICP 询锟绞★拷锟酵伙拷锟斤拷 IP 锟斤拷址锟斤拷锟斤拷锟斤拷
式锟斤拷锟斤拷锟斤拷锟� URL 锟饺碉拷锟斤拷息锟斤拷锟斤拷些锟斤拷锟捷匡拷锟斤拷锟斤拷锟斤拷锟皆凤拷锟绞斤拷锟叫凤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟� sarg锟斤拷 calamaris, Squid-Log-Analyzer 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷些锟斤拷锟捷诧拷锟斤拷锟斤拷 HTML 锟斤拷式锟侥凤拷锟斤拷锟斤拷锟芥。 锟斤拷些锟斤拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟斤拷没锟斤拷锟揭伙拷锟�
IP 锟斤拷址锟斤拷一锟斤拷锟斤拷使锟斤拷锟秸撅拷锟饺等硷拷录锟叫诧拷锟斤拷锟斤拷

锟斤拷些锟斤拷录锟侥硷拷也锟斤拷锟皆筹拷为锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 
cache_access_log      For access.log
cache_log             For cache.log
cache_store_log       For store.log (Store manager)
pid_filename          Squid process ID file name
 

锟斤拷证锟斤拷式

Squid 锟斤拷默锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟轿猴拷锟矫伙拷锟斤拷锟斤拷锟斤拷锟斤拷证锟斤拷锟教就匡拷锟皆斤拷锟叫凤拷锟绞★拷Squid 通锟斤拷一锟斤拷锟解部锟斤拷锟斤拷锟结供锟矫伙拷锟斤拷证
锟斤拷锟杰ｏ拷锟斤拷锟斤拷说只锟斤拷锟斤拷锟斤拷效锟斤拷锟矫伙拷锟斤拷锟斤拷 Internet锟斤拷锟斤拷锟斤拷锟斤拷锟揭伙拷锟斤拷锟叫э拷锟斤拷没锟斤拷锟斤拷锟斤拷锟斤拷搿ｏ拷锟斤拷锟斤拷锟� proxy_auth
ACL 锟斤拷 authenticate_program 锟斤拷实锟街ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷前强锟狡斤拷锟斤拷锟矫伙拷锟斤拷锟斤拷锟斤拷锟斤拷暮瞬椤ｏ拷锟斤拷锟斤拷谐锟揭恍� Squid
锟斤拷锟矫碉拷锟斤拷锟斤拷证锟斤拷锟斤拷
  1. LDAP : 使锟斤拷 Linux Lightweight 目录锟斤拷锟斤拷协锟介（Linux Lightweight Directory Access Protocol锟斤拷
  2. NCSA : 使锟斤拷 NCSA 锟斤拷锟斤拷锟矫伙拷锟斤拷锟斤拷锟斤拷锟诫档
  3. SMB : 使锟斤拷 SMB 协锟斤拷姆锟斤拷锟斤拷锟� SAMBA 锟斤拷 Windows NT
  4. MSNT : 使锟斤拷 Windows NT 锟斤拷锟斤拷锟斤拷证
  5. PAM : 使锟斤拷 Linux 锟侥匡拷装锟斤拷锟斤拷证模锟斤拷
  6. getpwam : 使锟斤拷 Linux 锟斤拷锟诫档
锟斤拷锟斤拷指锟斤拷使锟矫碉拷锟斤拷证锟斤拷锟津，匡拷锟斤拷锟斤拷 authenticate_program 选锟斤拷锟斤拷伞锟斤拷锟饺凤拷锟窖★拷锟斤拷锟斤拷锟街わ拷锟斤拷锟斤拷寻锟阶帮拷锟斤拷芎锟�
锟矫的癸拷锟斤拷锟斤拷

锟睫革拷 squid.conf 锟侥硷拷选锟斤拷锟斤拷证锟斤拷锟斤拷
authenticate_program /usr/local/bin/pam_auth

acl pass proxy_auth REQUIRED
acl mynetwork src 192.168.0.1/255.255.255.0
http_access deny !mynetwork
http_access allow pass
http_access deny all

锟斤拷锟斤拷锟斤拷锟斤拷示锟斤拷使锟斤拷 PAM 锟斤拷证锟斤拷锟斤拷锟斤拷锟斤拷锟矫伙拷锟节伙拷梅锟斤拷锟斤拷锟斤拷锟角帮拷锟斤拷锟斤拷锟斤拷锟斤拷证锟斤拷

锟斤拷锟斤拷些选锟斤拷锟斤拷锟� authenticate_ttl 锟斤拷 authenticate_ip_ttl锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟侥憋拷锟斤拷证锟斤拷锟斤拷亩锟斤拷锟斤拷锟斤拷锟斤拷锟剿凳鼓筹拷锟斤拷没锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟叫э拷锟�  

锟轿匡拷锟斤拷锟斤拷

锟斤拷锟侥斤拷锟斤拷锟斤拷锟斤拷锟斤拷 Squid 锟侥憋拷山一锟角ｏ拷锟斤拷锟斤拷牟慰锟斤拷锟斤拷峡锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷站锟斤拷锟揭碉拷锟斤拷  

锟斤拷锟斤拷篇锟斤拷锟铰凤拷锟斤拷锟斤拷锟斤拷

每篇锟斤拷锟铰讹拷锟叫革拷锟皆的凤拷锟斤拷页锟芥。锟斤拷锟斤拷锟揭筹拷锟斤拷铮拷锟斤拷锟斤拷锟斤拷峤伙拷锟斤拷郏锟揭诧拷锟斤拷圆榭达拷锟斤拷锟斤拷锟斤拷叩锟斤拷锟斤拷郏锟�
 锟斤拷锟斤拷页锟斤拷 
锟斤拷页锟斤拷LinuxFocus锟洁辑锟斤拷维锟斤拷
© D.S. Oberoi, FDL
LinuxFocus.org
锟斤拷锟斤拷锟斤拷锟斤拷锟絃inuxFocus锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
 锟斤拷锟斤拷锟斤拷息:
en --> -- : D.S. Oberoi <ds_oberoi(at)yahoo.com>
en --> zh: Free Neil <freeneil(at)sohu.com>

2002-03-13, generated by lfparser version 2.27