squid 配置

vi /etc/squid/squid.conf 只需配置两个地方 acl 和http_access acl 变量名1 arp MAC列表 #00:1e:90:b1:d8:7f acl 变量名2 src IP地址列表 #192.168.1.2 acl 变量名3 dstdomain 可访问的网页列表 # .163.com acl 变量名4 url_regex -i 可访问的网页列表 # http://www.163.com/ http_access allow [变量名1 | 变量名2] #表示可访问所有页面 http_access allow [变量名1 | 变量名2] [变量名3 | 变量名4] #只可访问列明的网页 ######################################### acl CONNECT method CONNECT #zhang acl allowed_mac arp "/etc/squid/allowedmac" acl allowed_ip src "/etc/squid/allowedip" acl corp_all src 172.17.103.0/24 acl corp_all src 172.17.102.0/24 acl corp_all src 10.99.253.0/24 acl corp_allowsites dstdomain "/etc/squid/corp_allowsite" acl corp_allow_url url_regex -i "/etc/squid/corp_allow_url" acl bhcorp_allowedip src "/etc/squid/bhcorp_allowedip" acl seds_allowedmac arp "/etc/squid/seds_allowedmac" acl seds_allowsite dstdomain "/etc/squid/seds_allowsite" # TAG: http_access ###################################################3 # And finally deny all other access to this proxy http_access allow localhost #zhang http_access allow allowed_mac http_access allow allowed_ip http_access allow corp_all corp_allowsites http_access allow corp_all corp_allow_url http_access allow bhcorp_allowedip http_access allow seds_allowedmac seds_allowsite http_access deny all # TAG: http_access2 [root@corplx1 squid] cat corp_allowsite .dhl.com.hk [root@corplx1 squid]# cat corp_allow_url http://www.excite.co.jp/world