http_access problem

[Dotnet]

hi my friendes

this is my squid conf file

i have problem with it

others can use my squid via setting it for them proxy server

i want no any one use my squid expcet my clientes

please help me













fqdncache_size 4096
cache_dir ufs /cache1 133000 16 256
visible_hostname mysite
cache_mgr admin@mysite.com

acl QUERY urlpath_regex -i cgi-bin \?
hierarchy_stoplist cgi-bin ?
no_cache deny QUERY

acl clients src 172.16.20.0/255.255.255.0 #Define Clients
acl clients src 217.214.205.33/255.255.255.248
acl clients src 80.131.240.63/255.255.255.248
acl all src 0.0.0.0/0.0.0.0
acl nocache_sites dstdomain .bbc.co.uk .cnn.com .sanjesh.com .sanjesh.org
#acl filter urlpath_regex -i xxx fuck porn sex lezb
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 8080 3128
acl CONNECT method CONNECT

http_access deny manager
http_access deny search
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow clients
http_access deny all
#http_access deny filter
icp_access deny all

httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
ie_refresh on

---

موضوعات مشابه:

• Problem DC
• vpn problem
• i have problem
• E1 Problem
• http_access

---

[tolstoy]

شما کاری که می تونید بکنید اینه که از طریق iptables ورودی همه رو ببندید و فقط به کاربران محلی اجازه عبور بدید

iptables -P INPUT -j DROP
iptables -A INPUT -i eth0 -s <client address> -j ACCEPT