Hi, I am using SQUID 2.7 in a Ubuntu Server System. Im using ACL to block sites for different VLANS. My first problem here is that one of the VLANs need access to social network site, such as Facebook, twitter,myspace. Once I added the sites in the whitelist, they are able to get in but the sites are UNUSABLE. Only text get loaded. I've noticed the same behavior is happening for these sites: www.facebook.com www.twitter.com www.yahoo.com www.weather.com www.youtube.com I still don?t know if this could be a Javascript issue (somehow SQUID is blocking it) or something else. I must say, this is happening for aproxx. 15 systems and if remove the squid from these VLANs The sites will load perfectly. By the way, http 11 is ON Please find attached a screenshot of one of the sites getting loaded with squid in the middle. Also attached is the squid.conf details. Any suggestions? Thanks and Regards, Luis Veana IT MANAGER Call Center Services International Blvd. Paseo de los Heroes No.10105-702 | 7mo piso | Zona Rio|Tijuana, BC México Tel: MX +52 (664)231 3818 | USA 619 428 9669 |luis.veana@xxxxxxxxxxxxxxxxxxx |
Attachment:
weather_com.JPG
Description: JPEG image
INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS acl goodsites dstdomain .google.com.mx acl goodsites dstdomain .microsoft.com acl goodsites dstdomain .bajacallcenters.com acl goodsites dstdomain .facebook.com acl badsites dstdomain .nba.com acl administracion src 172.31.3.0/24 acl NAR src 172.31.4.0/24 acl whitelist_NAR dstdomain "/etc/squid/whitelist_NAR" acl EB src 172.31.7.0/24 acl whitelist_EB dstdomain "/etc/squid/whitelist_EB" acl Java browser Java/1.4 Java/1.5 Java/1.6 acl javascript rep_mime_type -i ^application/x-javascript$ http_access allow NAR javascript http_access allow NAR Java http_access allow administracion goodsites http_access allow NAR whitelist_NAR http_access allow EB whitelist_EB # Example rule allowing access from your local networks. # Adapt localnet in the ACL section to list your (internal) IP networks # from where browsing should be allowed #http_access allow localnet http_access allow localhost # And finally deny all other access to this proxy http_access deny all
