Ederson Gustavo Raminelli

Ola amigos tenho um server 2008 com duas placas de rede, uma recebe internet e outra distribui para a rede 192.168.1.0/24, bem como os serviços de dhcp, dns, ad, etc. Estou tentando instalar o squid proxy porém os computadores da rede dizem que não podem se conectar ao proxy, segue meu arquivo squid.conf acl all src all acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl rede_escopo src 192.168.1.0/24 acl ip_liberado src 192.168.1.1 #Autenticando usuário no Active Directory. #auth_param ntlm program c:/squid/libexec/mswin_ntlm_auth.exe ESCOPO/ESCOPO-05 --helper-protocol=squid-2.5-ntlmssp #auth_param ntlm children 5 #acl password proxy_auth REQUIRED # Portas definidas por padrão. acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT # ACL para liberar acesso ao JAVA acl java browser Java/1.4 Java/1.5 Java/1.6 # ACL Para liberar sites acl whitelist url_regex -i "c:/squid/etc/acl/whitelist" # ACL para bloquear sites acl blacklist url_regex -i "c:/squid/etc/acl/blacklist" #ACL para bloquear webmail acl webmail url_regex -i "c:/squid/etc/acl/webmail" #Acl para bloquear download acl download urlpath_regex .pps$ .ppt$ .com$ .exe$ .pif$ .bat$ .asfv1$ .wmv$ .mp3$ .avi$ .rar$ .zip$ .msi$ .asf$ acl streaming urlpath_regex -i \.asf$ \.asx$ \.avi$ \.au$ \.mid \.midi$ .\asfv1$ \.wav$ # Bloquear MSN acl msn url_regex -i "c:/squid/etc/acl/msn" acl messenger url_regex -i gateway/gateway.dll #Bloquear GTALK acl gtalk url_regex -i "c:/squid/etc/acl/gtalk" # Liberar acesso ao java http_access allow java # Only allow cachemgr access from localhost http_access allow manager localhost http_access deny manager # Deny requests to unknown ports http_access deny !Safe_ports # Deny CONNECT to other than SSL ports http_access deny CONNECT !SSL_ports http_access allow ip_liberado http_access allow whitelist http_access deny download http_access deny streaming http_access deny msn http_access deny messenger http_access deny gtalk http_access deny blacklist http_access deny webmail #http_access allow password http_access allow rede_escopo # And finally deny all other access to this proxy http_access deny all #Allow ICP queries from local networks only icp_access allow rede_escopo icp_access deny all # Squid normally listens to port 3128 http_port 8080 # Definir para o idioma portugues as mensagens de erro. error_directory C:/Squid/share/errors/Portuguese hierarchy_stoplist cgi-bin ? # Arquivo onde sera gerado o log de acesso dos usuários. access_log c:/squid/var/logs/access.log squid refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/\?) 0 0% 0 refresh_pattern . 0 20% 4320 Podem me ajudar se estou fazendo algo errado.