论坛徽章:: 0

电梯直达

1楼 [收藏(0)] [报告]

发表于 2011-07-22 10:14 |只看该作者 |倒序浏览

本帖最后由 boltlong 于 2011-07-22 10:24 编辑

我在虚拟机上配置了linux+squid反向代理.外网eth0:192.192.1.100  内网eth1:192.168.2.1 ,web服务器是2008,内网ip:192.168.2.2.网关:192.168.2.1
反向代理配置好了,能从外网访问192.192.1.100  ,访问WEB服务器的网页.
但是现在我想内网服务器访问外网,还需要怎么设置啊?怎么acl定义后还是无法访问外网啊?
squid.config 如下
Configuration File: /usr/local/squid/etc/squid.conf (depth 0)
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16       # RFC1918 possible internal network
acl localnet src fc00::/7    # RFC 4193 local private network range
acl localnet src fe80::/10    # RFC 4291 link-local (directly plugged) machines
acl SSL_ports port 443
acl Safe_ports port 80       # http
acl Safe_ports port 21       # ftp
acl Safe_ports port 443             # https
acl Safe_ports port 70       # gopher
acl Safe_ports port 210             # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280             # http-mgmt
acl Safe_ports port 488             # gss-http
acl Safe_ports port 591             # filemaker
acl Safe_ports port 777             # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access allow all
acl myfriends src 192.168.2.0/24
http_port 3128
hierarchy_stoplist cgi-bin ?
cache_dir ufs /usr/local/squid/var/cache 100 16 256
coredump_dir /usr/local/squid/var/cache
refresh_pattern ^ftp:       1440 20%10080
refresh_pattern ^gopher:    1440 0%1440
refresh_pattern -i (/cgi-bin/|\?) 0 0%0
refresh_pattern .             0    20%4320
visible_hostname 192.192.0.100
http_port 80 vhost vport
icp_port 0
cache_peer 192.168.2.2 parent 80 0 proxy-only no-query default round-robin
cache_peer 192.192.1.100 parent 8080 0 proxy-only no-query default round-robin weight=1 name=squid
cache_peer_domain squid parent.squid.com
cache_peer_access squid allow all
cache_mem 64 MB
cache_effective_user squid
cache_effective_group squid