求助squid单网卡透明代理 acl问题

zhai_liang2046

我做了一台squid单网卡透明代理，acl也做了控制，为什么不生效？


想实现只允许访问www.ems.com.cn和[url]www.zjs.com.cn[/url] 两个网站而且不允许通过ip地址访问


我的规则是不是有问题？

zhai_liang2046

这是   squid.conf
acl all src 0.0.0.0/0.0.0.0
acl sales src 192.168.9.0/255.255.255.0
acl manager proto cache_object
acl to_localhost dst 127.0.0.0/8
acl qqdomain dstdomain  .qq.com  .tecent.com
acl workdomain dstdomain www.ems.com.cn www.zjs.com.cn
acl badsite url_regex -i www.msn.com .qq.com .tecent.com
acl IPForHostname dstdom_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
acl download urlpath_regex -i \.mp3$ \.exe$ \.avi$ \.rar$ \.rvmb$ \.jpg  #ç¦æ­¢ä¸‹è½½

#------------------------------------------------------------------------------------
http_access deny badsite
http_access deny  qqdomain
http_access deny IPForHostname
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow workdomain
http_access allow manager
http_access allow sales
http_access deny all

icp_access allow all
http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
cache_mem 100 MB
maximum_object_size 4096 KB
maximum_object_size_in_memory 8 KB
cache_dir ufs /var/spool/squid 100 16 256
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
cache_mgr nm-zl@hotmail.com
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
acl apache rep_header Server ^Apache
visible_hostname none
broken_vary_encoding allow apache
coredump_dir /var/spool/squid