Ver Mensaje Individual
  #2 (permalink)  
Antiguo 11/12/2009, 16:59
sortega
 
Fecha de Ingreso: agosto-2008
Ubicación: Bogotá
Mensajes: 148
Antigüedad: 15 años, 9 meses
Puntos: 2
Respuesta: Configurar Squid transparente...

Mmm... parece que no he dado suficiente información...

Aquí el squid.conf:

Código:
# Squid normally listens to port 3128
http_port 80 transparent

#Recommended minimum configuration:
acl redlocal src 192.168.0.0/24
acl all src all
###acl manager proto cache_object
acl localhost src 127.0.0.1/32
###acl to_localhost dst 127.0.0.0/8
#
###acl localnet src 10.0.0.0/8    # RFC1918 possible internal network
###acl localnet src 172.16.0.0/12    # RFC1918 possible internal network
###acl localnet src 192.168.0.0/16    # RFC1918 possible internal network
#
acl SSL_ports port 443
acl Safe_ports port 80        # http
acl Safe_ports port 21        # ftp
acl Safe_ports port 443        # https
acl Safe_ports port 70        # gopher
acl Safe_ports port 210        # wais
acl Safe_ports port 1025-65535    # unregistered ports
acl Safe_ports port 280        # http-mgmt
acl Safe_ports port 488        # gss-http
acl Safe_ports port 591        # filemaker
acl Safe_ports port 777        # multiling http
acl CONNECT method CONNECT

# Only allow cachemgr access from localhost
http_access allow redlocal
http_access allow all
###http_access allow manager localhost
###http_access deny manager
# Deny requests to unknown ports
###http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
###http_access deny CONNECT !SSL_ports

# And finally deny all other access to this proxy
###http_access deny all

#Allow ICP queries from local networks only
icp_access allow redlocal
###icp_access deny all

hierarchy_stoplist cgi-bin ?

#Suggested default:
refresh_pattern ^ftp:        1440    20%    10080
refresh_pattern ^gopher:    1440    0%    1440
refresh_pattern -i (/cgi-bin/|\?) 0    0%    0
refresh_pattern .        0    20%    4320

# Don't upgrade ShoutCast responses to HTTP
acl shoutcast rep_header X-HTTP09-First-Line ^ICY\s[0-9]
upgrade_http0.9 deny shoutcast

acl apache rep_header Server ^Apache
broken_vary_encoding allow apache

error_directory c:/squid/share/errors/Spanish

coredump_dir c:/squid/var/cache
Lo que está con triple signo numeral venía descomentado predeterminadamente. Yo lo comenté. (Y obviamente lo probé sin comentar dichas líneas)