帮忙查看为什么封杀的CONNECT端口没有生效

龙飘飘

公司要禁止炒股，我们准备限制一些交易客户端常用的端口，但发现设置后没有生效，不知何故。我是菜鸟，请高手提供帮助分析。基本设置如下：
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 443
#call center messages
acl Safe_ports port 8088
acl Safe_ports port 7001
acl Safe_ports port 8001
acl Safe_ports port 8090
acl Safe_ports port 4447
acl Safe_ports port 8018

#fengsha chaogu 20071101
acl chaogu_ports port 22221
acl chaogu_ports port 22223
acl chaogu_ports port 22224
acl chaogu_ports port 8601
acl chaogu_ports port 8001
acl chaogu_ports port 7709
acl chaogu_ports port 9000
acl chaogu_ports port 9999
acl chaogu_ports port 5188
acl chaogu_ports port 8601
acl chaogu_ports port 7709
acl chaogu_ports port 7711
acl chaogu_ports port 6677

acl CONNECT method CONNECT

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/etc/password
auth_param basic children 5
auth_param basic realm TEMP.COM.CN
auth_param basic credentialsttl 2 hours
acl normal proxy_auth REQUIRED

acl mmxfile urlpath_regex \.mp3$ \.avi$ \.rmvb$ \.rm$ \.wmv$ \.mid$ \.EXE$ \.exe$ \.com$ \.bat$ \.wma$ \.asf$ \.rvmb$ \.swf$

#msn
acl msnmessenger url_regex -i gateway.dll

#local vips
acl vips src a.b.c.d/32

#
acl gooddomains dstdomain .windowsupdate.microsoft.com
#bank
acl gooddomains dstdomain .ccb.cn
acl gooddomains dstdomain .ccb.com
acl gooddomains dstdomain .ccb.com.cn
acl gooddomains dstdomain .95559.com.cn
acl gooddomains dstdomain .95599.cn
acl gooddomains dstdomain .icbc.com.cn
acl gooddomains dstdomain .cmbchina.com
#QQ domain
acl baddomains dstdomain .qq.com
acl baddomains dstdomain .tencent.com
#goodip
acl goodips dst 219.142.91.18/32
acl goodips dst 210.74.41.41/32
#QQ servers
acl badips dst 218.17.217.106/32

http_access allow vips
http_access allow gooddomains
http_access allow goodips
http_access deny msnmessenger
http_access deny baddomains
http_access deny badips
http_access deny mmxfile
http_access allow normal
http_access deny all

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access allow CONNECT SSL_ports
http_access deny CONNECT chaogu_ports
http_access deny CONNECT

http_access allow localhost
http_access deny all

feillex

将

1. 
   
2. http_access allow manager localhost
   
3. http_access deny manager
   
4. http_access deny !Safe_ports
   
5. http_access allow CONNECT SSL_ports
   
6. http_access deny CONNECT chaogu_ports
   
7. http_access deny CONNECT
   

复制代码

放到

1. 
   
2. http_access allow normal
   

复制代码

前即可

龙飘飘

如feillex意见修改后生效了， ，谢谢。