Bildirimler
Hepsini Temizle

ubuntu server  

  RSS
mehmet ali
(@mehmetali)
Üye

arkadaslar benim bir sorunum var ubuntu server kurdum squid proxy server kurulu squid

acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1

acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http

acl lan src 192.168.1.0/24
acl serbestdomain dstdomain "/etc/squid3/serbestdomainler"
acl serbestip src "/etc/squid3/serbestipler"
#acl https_url_allowed url_regex -i "/etc/squid3/https_url_allowed"

#http_access allow CONNECT https_url_allowed
http_access allow serbestip
http_access allow serbestdomain
http_access deny !serbestdomain
http_access allow lan

acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all

http_port 3128 transparent

cache_dir aufs /var/spool/squid3 1000 16 256

error_directory /usr/share/squid3/errors/Turkish
coredump_dir /var/spool/squid3

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern (Release|Packages(.gz)*)$      0       20%     2880
refresh_pattern .               0       20%     4320

squid yapılandırmam yukardaki gibi

iptables ise 

 

# Generated by iptables-save v1.4.12 on Sat Jan 26 15:45:04 2013
*nat
:PREROUTING ACCEPT [143:16099]
:INPUT ACCEPT [59:11637]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [1:76]
-A PREROUTING -p tcp -m tcp --dport 3389 -j DNAT --to-destination 192.168.1.37
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Completed on Sat Jan 26 15:45:04 2013
# Generated by iptables-save v1.4.12 on Sat Jan 26 15:45:04 2013
*filter
:INPUT ACCEPT [641680:126583650]
:FORWARD ACCEPT [963:405376]
:OUTPUT ACCEPT [101254:72083795]
-A INPUT -p tcp -m tcp --dport 443 -j DROP
-A INPUT -d 31.13.64.7/32 -p tcp -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -j LOG
-A FORWARD -j LOG
-A OUTPUT -j LOG
COMMIT
# Completed on Sat Jan 26 15:45:04 2013
gelelim soruna bu sekilde, windows kurulu bir makinadan uzakdaki bir cliente remote desktop yapıyorum kullanıcı login ekranı geliyor ama sifreyi girdigim zaman hatalı girdiniz diyip oturum acamıyor bilgisayar

ikinci sorumda transparent modda calıstırdıgımda clientlerden https sitelerini acmıyor internet seceneklerinde baglantılardan windowsu linux a yonlendirdigimde normal cıkıyor

yardımlarınız icin tesekkürler 

Alıntı
Gönderildi : 29/01/2013 17:23
Rahmi DILLI
(@rahmidilli)
Tecrübeli Üye

,

CevapAlıntı
Gönderildi : 22/05/2013 16:17
Paylaş: