Quote:
Originally Posted by acid_kewpie
Well it'd be a start to show us your squid configs, otherwise we wouldn't have a chance of knowing what's going on.
|
hello
thanks for your reply
here is my config
#Recommended minimum configuration:
acl all src 192.168.1.100-192.168.1.255/255.255.255.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl bad_url dstdomain "/etc/squid/bad-sites.squid"
acl blockfiles urlpath_regex "/etc/squid/blockfiles.acl"
and here is my blockfiles.acl
\.[Mm][Pp]3$
\.[Ee][Xx][Ee]$
\.exe$
\.msi$
\.zip$
\.rar$
\.mp3$
\.[^a-z]exe[^a-z]
\.dmg$
and here is my http_access deny configuration
#Default:
# cache_vary on
# TAG: broken_vary_encoding
# Many servers have broken support for on-the-fly Content-Encoding,
# returning the same ETag on both plain and gzip:ed variants.
# Vary replies matching this access list will have the cache split
# on the Accept-Encoding header of the request and not trusting the
# ETag to be unique.
#
# Apache mod_gzip and mod_deflate known to be broken so don't trust
# Apache to signal ETag correctly on such responses
acl apache rep_header Server ^Apache
acl pc58 src 192.168.1.158/255.255.255.0
http_access deny bad_url
http_access deny blockfiles
http_access allow manager localhost
http_access allow all
http_access allow manager localhost
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
broken_vary_encoding allow apache
some executable i can able to download but some cannot
i seacrh some tutorials and tried to solve the problem but still i can download
thanks