discuss-pt-br

discuss-pt-br@lists.centos.org

1528 discussions

Start a nNew thread

Auto-Re: DHCP!
by zhangjie＠beijing101.com 05 Jan '17

05 Jan '17

谢谢您的来信，我已经收到，并将尽快回复。祝您工作顺利！张杰

1 0

Auto-Re: DHCP!
by 江明 05 Jan '17

05 Jan '17

邮件收到

1 0

Auto-Re: ACL's!
by zhangjie＠beijing101.com 13 Dec '16

13 Dec '16

谢谢您的来信，我已经收到，并将尽快回复。祝您工作顺利！张杰

1 0

ACL's!
by Glênio Côrtes Himmen 13 Dec '16

13 Dec '16

Tive de fazer umas mudanças nas ACLs, segue versão atual. acl ENTRETENIMENTO url_regex -i "/etc/squid/entretenimento" acl HORARIO_ALMOCO time MTWHF 11:30-13:00 acl uLiberado proxy_auth "/etc/squid/uLiberado" acl sitesLivres dstdomain "/etc/squid/sitesLivres" acl ipLiberado src "/etc/squid/ipLiberado" acl windowsupdate dstdomain "/etc/squid/winupdate" acl horario dstdomain "/etc/squid/horario" acl blacklist url_regex -i "/etc/squid/blacklist" acl ipBloqueado src "/etc/squid/ipBloqueado" acl dom_aggressive dstdomain "/etc/squid/domains_aggressive" acl dom_gambling dstdomain "/etc/squid/domains_gambling" acl dom_porn dstdomain "/etc/squid/domains_porn" acl stYoutube dstdomain "/etc/squid/stYoutube" acl ipYoutube src "/etc/squid/ipYoutube" acl url_aggressive url_regex -i "/etc/squid/urls_aggressive" acl url_gambling url_regex -i "/etc/squid/urls_gambling" acl url_porn url_regex -i "/etc/squid/urls_porn" acl noCacheIP dst 187.52.105.132 # aparecida acl noCacheIP dst 187.115.70.244 # Prodata acl noCacheIP dst 172.16.0.4 # Proxy acl noCacheIP dst 187.54.87.49 # smta acl noCacheIP dst 187.5.111.28 # detran acl noCacheIP dst 201.48.19.37 # sefaz acl noCacheDominio dstdomain .aparecida.go.gov.br acl noCacheDominio dstdomain .detran.go.gov.br http_access deny blacklist http_access allow sitesLivres http_access allow windowsupdate http_access deny ipBloqueado http_access allow HORARIO_ALMOCO ENTRETENIMENTO http_access deny ENTRETENIMENTO !ipLiberado http_access allow uLiberado http_access allow horario http_access allow stYoutube ipYoutube http_access deny dom_aggressive http_access deny dom_gambling http_access deny dom_porn http_access deny url_aggressive http_access deny url_gambling http_access deny url_porn http_access allow noCacheIP http_access allow noCacheDominio Glênio Côrtes Himmen Super. Municipal de Trânsito de Aparecida glenio.11622x(a)aparecida.go.gov.br

1 0

Auto-Re: Site Youtube!
by zhangjie＠beijing101.com 13 Dec '16

13 Dec '16

谢谢您的来信，我已经收到，并将尽快回复。祝您工作顺利！张杰

2 1

Auto-Re: ACL's!
by 江明 13 Dec '16

13 Dec '16

邮件收到

1 0

Site Youtube!
by Glênio Côrtes Himmen 13 Dec '16

13 Dec '16

Amigos(as), Esta semana comecei a ter problemas com o site do Youtube. De casa onde a Internet é livre, não estou mais conseguindo converter vídeos do site utilizando o site www.onlinevideoconverter.com/pt/, todo vídeo que eu converto na hora de assistir ele vai do começo ao fim do vídeo em poucos segundos, como se tivesse colocado a tecla FW do antigo vídeo casste. No serviço, tenho algumas pessoas que precisam acessar o Youtube, e apesar da liberação, estou tendo erros conforme log abaixo. Já procurei um amigo meu que entende muito de squid e iptables, ele olhou meu squid.conf e não constatou nada de errado. A única observação que ele me fez foi em relação a regra proxy_auth que estava muito abaixo. Alguém vem passando por situação igual ou pior que a minha e pode me ajudar? Segue squid.conf, e também o arquivo ipYoutube, stYoutube e entretenimento para vocês olharem. Gostaria também de mudar a forma de liberação dos sites, em vez de liberar o IP, gostaria de liberar por usuário. Me indiquem literatura que eu possa aprender a fazer esta mudança. Andei lendo sobre o ident, mas vi que precisa de um programa executando no computador cliente para identificar o usuário logado, mas aqui não temos ainda o Active Directory, todas as máquinas tem o mesmo login e senha, o que impossibilita a utilização do ident. SQUID.CONF inicio... ############################################################### visible_hostname PROXY-SMTA emulate_httpd_log on http_port 3128 acl manager proto cache_object acl localhost src 127.0.0.1/32 ::1 acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1 acl localnet src 172.16.0.0/25 # RFC1918 possible internal network acl localnet src fc00::/7 # RFC 4193 local private network range acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines auth_param basic children 5 auth_param basic realm SMTA (Digite o seu nome.matricula & Senha) auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/squid_passwd authenticate_ip_ttl 90 seconds acl SSL_ports port 443 563 acl Safe_ports port 563 # snews acl Safe_ports port 873 # rsync acl Safe_ports port 80 # http acl Safe_ports port 20-21 # ftp acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 631 # cups acl Safe_ports port 777 # multiling http acl Safe_ports port 901 # swat acl Safe_ports port 1025-65535 # unregistered ports acl CONNECT method CONNECT acl autenticados proxy_auth REQUIRED ########################################################### # ACLS ########################################################### acl ENTRETENIMENTO url_regex -i "/etc/squid/entretenimento" acl HORARIO_ALMOCO time MTWHF 11:30-13:00 acl uLiberado proxy_auth "/etc/squid/uLiberado" acl sitesLivres dstdomain "/etc/squid/sitesLivres" acl ipLiberado src "/etc/squid/ipLiberado" acl ipYoutube src "/etc/squid/ipYoutube" acl windowsupdate dstdomain "/etc/squid/winupdate" acl horario dstdomain "/etc/squid/horario" acl blacklist url_regex -i "/etc/squid/blacklist" acl ipBloqueado src "/etc/squid/ipBloqueado" acl dom_aggressive dstdomain "/etc/squid/domains_aggressive" acl dom_gambling dstdomain "/etc/squid/domains_gambling" acl dom_porn dstdomain "/etc/squid/domains_porn" acl stYoutube dstdomain "/etc/squid/stYoutube" acl url_aggressive url_regex -i "/etc/squid/urls_aggressive" acl url_gambling url_regex -i "/etc/squid/urls_gambling" acl url_porn url_regex -i "/etc/squid/urls_porn" acl noCacheIP dst 187.52.105.132 # aparecida acl noCacheIP dst 187.115.70.244 # Prodata acl noCacheIP dst 172.16.0.4 # Proxy acl noCacheIP dst 187.54.87.49 # smta acl noCacheIP dst 187.5.111.28 # detran acl noCacheIP dst 201.48.19.37 # sefaz acl noCacheDominio dstdomain .aparecida.go.gov.br acl noCacheDominio dstdomain .detran.go.gov.br http_access deny blacklist http_access allow sitesLivres http_access allow windowsupdate http_access deny ipBloqueado http_access allow uLiberado http_access allow horario http_access allow stYoutube ipYoutube http_access deny dom_aggressive http_access deny dom_gambling http_access deny dom_porn http_access deny url_aggressive http_access deny url_gambling http_access deny url_porn http_access allow HORARIO_ALMOCO ENTRETENIMENTO http_access deny ENTRETENIMENTO !ipLiberado http_access allow noCacheIP http_access allow noCacheDominio http_access allow manager localhost http_access deny manager http_access allow localnet http_access allow localhost http_access deny all error_directory /usr/share/squid/errors/pt-br/ error_default_language pt-br hierarchy_stoplist cgi-bin ? cache deny noCacheIP cache deny noCacheDominio cache_dir ufs /var/spool/squid 1024 16 256 cache_swap_low 85 cache_swap_high 95 coredump_dir /var/spool/squid refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 20% 4320 SQUID.CONF final... stYoutube inicio... .youtube.com redirector.googlevideo.com googlevideo.com .ggpht.com .ytimg.com stYoutube final... ipYoutube inicio... 172.16.0.18 172.16.0.27 172.16.0.33 172.16.0.109 ipYuotube final... entretenimento inicio... ### Facebook inicio... .facebook.com .facebook.com.br .facebook.net .fbcdn.net ### Facebook final... .esporte.uol.com.br .caras.uol.com.br .clikjogos.uol.com.br .king.com plus.google.com .twitter.com entretenimento.r7.com .estrelando.com.br .gadoo.com.br .rockntech.com.br .e-farsas.com .techmestre.com .mundodastribos.com .sitedecuriosidades.com .blogandotudo.com.br .radioguaiba.com.br .radiosociedadeam.com.br www.r7.com/r7-play trilhassonoras.r7.com tv.r7.com videos.r7.com .instagram.com .orkut.com play.google.com www.positivafm.com.br/player.php www.positivafm.com.br/player-video.html mtalk.google.com ### Sites do Youtube ### .youtube.com redirector.googlevideo.com googlevideo.com .ggpht.com .ytimg.com .glbimg.com ### Sites do Youtube ### .springserve.com .gravatar.com .badoo.com ### Sites Gshow iicio... .videos.globo.com .globovideos.com entretenimento.globo.com video.globo.com famosos.globo.com gshow.globo.com ### Sites Gshow final..u. .musica.uol.com.br .deezer.com .tudoradio.com .avatar.uol.com.br www.redetv.uol.com.br/aovivo .video.yahoo.com .videoapi.terra.com .player-be.terra.com .netflix.com .vitrines.in .radios.redecol.com.br www.99-5fm.com.br/tocando_agora www.99-5fm.com.br/aovivo .twoo.com .ofuxico.com.br .alphafm.com.br/aovivo .alphafm.com.br/vídeos .radiorage.com player.alphafm.com.br .vimeo.com player-be.terra.com .palcomp3.com .player.mais.uol.com.br www.redetv.uol.com.br/videos .verfilmes.net .ouvirmusica.com.br radiorage.dl.myway.com .sheknows.com .slideplayer.com.br teleseries.com.br .eonline.com/videos/ .radiosertanejaonline.com .radios.ebc.com.br .radiosertanejaonline.com entretenimento final... Log do SQUID inicio... [root@proxy squid]# tail -f /var/log/squid/access.log | grep 172.16.0.109 1481642972.690 3 172.16.0.109 TCP_DENIED/407 3478 CONNECT 187.52.105.133:13111 - NONE/- text/html 1481642988.307 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r4---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643017.573 29341 172.16.0.109 TCP_MISS/200 4575 CONNECT s.ytimg.com:443 glenio.11622x DIRECT/216.58.202.110 - 1481643017.575 29347 172.16.0.109 TCP_MISS/200 4574 CONNECT s.ytimg.com:443 glenio.11622x DIRECT/216.58.202.110 - 1481643017.579 41898 172.16.0.109 TCP_MISS/200 4574 CONNECT www.youtube.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643017.582 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r4---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643017.589 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r4---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643018.384 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643018.467 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643020.707 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643020.719 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643020.842 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r4---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643020.877 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643022.994 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643032.848 5 172.16.0.109 TCP_DENIED/407 3761 POST http://message.real.com/Msg/7.0/win32 - NONE/- text/html 1481643033.100 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643035.134 14266 172.16.0.109 TCP_MISS/200 4575 CONNECT s.youtube.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643035.140 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643037.037 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r6---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643037.045 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r6---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643037.207 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643037.230 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643039.305 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643039.368 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643039.422 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r6---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643039.480 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643039.743 19027 172.16.0.109 TCP_MISS/200 4575 CONNECT i.ytimg.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643039.743 19105 172.16.0.109 TCP_MISS/200 4574 CONNECT i.ytimg.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643039.748 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643041.557 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643049.197 14510 172.16.0.109 TCP_MISS/200 4341 CONNECT www.googleapis.com:443 glenio.11622x DIRECT/216.58.202.106 - 1481643049.198 19636 172.16.0.109 TCP_MISS/200 4510 CONNECT googleads.g.doubleclick.net:443 glenio.11622x DIRECT/216.58.202.194 - 1481643049.203 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643050.090 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643050.096 0 172.16.0.109 TCP_DENIED/403 3717 CONNECT r6---sn-q4fl6ney.googlevideo.com:443 - NONE/- text/html 1481643050.155 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643052.192 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643053.165 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643055.464 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643059.116 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643063.487 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643066.841 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643067.547 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643068.856 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643076.447 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643077.477 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643079.936 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643082.461 5 172.16.0.109 TCP_DENIED/407 3753 CONNECT safebrowsing.google.com:443 - NONE/- text/html 1481643082.487 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643086.151 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643088.502 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643089.375 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643091.495 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643095.349 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643096.832 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643101.596 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643103.491 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643104.056 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643105.124 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643107.952 1405 172.16.0.109 TCP_MISS/200 880 POST http://clients1.google.com/ocsp glenio.11622x DIRECT/216.58.202.46 application/ocsp-response 1481643110.246 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643111.445 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643111.509 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643111.536 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r4---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643111.592 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r4---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643111.674 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643111.764 0 172.16.0.109 TCP_DENIED/403 3717 CONNECT r6---sn-q4fl6ney.googlevideo.com:443 - NONE/- text/html 1481643111.883 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643111.901 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643113.931 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643114.001 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r4---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643114.020 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643114.064 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643115.164 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643116.110 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643116.351 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643123.315 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643123.521 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r6---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643123.554 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r6---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643123.629 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643123.648 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643125.716 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643125.749 0 172.16.0.109 TCP_DENIED/403 3738 CONNECT r6---sn-cg51pauxax-btoe.googlevideo.com:443 - NONE/- text/html 1481643125.799 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643125.905 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643126.543 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643127.978 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643128.369 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643129.077 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643131.205 7050 172.16.0.109 TCP_MISS/200 0 CONNECT id.google.com.br:443 glenio.11622x DIRECT/216.58.202.131 - 1481643134.732 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643136.357 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643136.453 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643140.304 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643142.453 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643149.131 503 172.16.0.109 TCP_MISS/200 1023 POST http://ocsp.int-x3.letsencrypt.org/ glenio.11622x DIRECT/189.11.250.27 application/ocsp-response 1481643149.562 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643149.631 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643150.307 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643154.992 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643155.686 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643157.351 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643161.001 2239 172.16.0.109 TCP_MISS/000 0 POST http://clients1.google.com/ocsp glenio.11622x DIRECT/216.58.202.46 - 1481643161.598 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643163.234 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643165.783 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643169.394 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643170.139 1999 172.16.0.109 TCP_MISS/000 0 POST http://clients1.google.com/ocsp glenio.11622x DIRECT/216.58.202.46 - 1481643170.374 433 172.16.0.109 TCP_MISS/200 880 POST http://clients1.google.com/ocsp glenio.11622x DIRECT/216.58.202.46 application/ocsp-response 1481643170.423 442 172.16.0.109 TCP_MISS/200 880 POST http://clients1.google.com/ocsp glenio.11622x DIRECT/216.58.202.46 application/ocsp-response 1481643170.442 461 172.16.0.109 TCP_MISS/200 880 POST http://clients1.google.com/ocsp glenio.11622x DIRECT/216.58.202.46 application/ocsp-response 1481643171.260 6795 172.16.0.109 TCP_MISS/200 7060 CONNECT googleads.g.doubleclick.net:443 glenio.11622x DIRECT/216.58.202.194 - 1481643173.478 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643175.369 12182 172.16.0.109 TCP_MISS/200 18643 CONNECT googleads.g.doubleclick.net:443 glenio.11622x DIRECT/216.58.202.194 - 1481643176.265 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643178.149 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643179.835 16385 172.16.0.109 TCP_MISS/200 0 CONNECT googleads.g.doubleclick.net:443 glenio.11622x DIRECT/216.58.202.194 - 1481643180.265 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643181.083 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643182.556 2172 172.16.0.109 TCP_MISS/000 0 POST http://clients1.google.com/ocsp glenio.11622x DIRECT/clients1.google.com - 1481643182.606 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643183.801 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643188.420 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643188.786 2232 172.16.0.109 TCP_MISS/000 0 POST http://clients1.google.com/ocsp glenio.11622x DIRECT/216.58.202.46 - 1481643189.933 2023 172.16.0.109 TCP_MISS/000 0 POST http://ss.symcd.com/ glenio.11622x DIRECT/ss.symcd.com - 1481643190.854 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643192.417 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643193.141 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643194.506 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643194.719 21848 172.16.0.109 TCP_MISS/200 1440 CONNECT cas.sv.us.criteo.com:443 glenio.11622x DIRECT/74.119.117.72 - 1481643195.893 24362 172.16.0.109 TCP_MISS/200 3536 CONNECT tpc.googlesyndication.com:443 glenio.11622x DIRECT/216.58.202.33 - 1481643203.972 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643205.339 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643205.667 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643205.865 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643207.573 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643207.923 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643211.452 8396 172.16.0.109 TCP_MISS/200 4643 CONNECT csi.gstatic.com:443 glenio.11622x DIRECT/216.58.204.35 - 1481643211.452 6214 172.16.0.109 TCP_MISS/200 4644 CONNECT csi.gstatic.com:443 glenio.11622x DIRECT/216.58.204.35 - 1481643211.549 7896 172.16.0.109 TCP_MISS/200 4642 CONNECT csi.gstatic.com:443 glenio.11622x DIRECT/216.58.204.35 - 1481643211.847 253571 172.16.0.109 TCP_MISS/200 114396 CONNECT i9.ytimg.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643212.660 9614 172.16.0.109 TCP_MISS/200 4643 CONNECT csi.gstatic.com:443 glenio.11622x DIRECT/216.58.204.35 - 1481643213.357 42328 172.16.0.109 TCP_MISS/200 58146 CONNECT cas.sv.us.criteo.com:443 glenio.11622x DIRECT/74.119.117.72 - 1481643213.953 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643215.694 84473 172.16.0.109 TCP_MISS/200 21215 CONNECT www.vivaolinux.com.br:443 glenio.11622x DIRECT/162.144.34.172 - 1481643217.036 0 172.16.0.109 TCP_DENIED/403 3699 CONNECT redirector.googlevideo.com:443 - NONE/- text/html 1481643222.758 70290 172.16.0.109 TCP_MISS/200 18518 CONNECT static.vivaolinux.com.br:443 glenio.11622x DIRECT/162.144.34.172 - 1481643222.852 70370 172.16.0.109 TCP_MISS/200 4999 CONNECT static.vivaolinux.com.br:443 glenio.11622x DIRECT/162.144.34.172 - 1481643224.300 71842 172.16.0.109 TCP_MISS/200 12410 CONNECT static.vivaolinux.com.br:443 glenio.11622x DIRECT/162.144.34.172 - 1481643224.301 71838 172.16.0.109 TCP_MISS/200 55831 CONNECT static.vivaolinux.com.br:443 glenio.11622x DIRECT/162.144.34.172 - 1481643229.505 29653 172.16.0.109 TCP_MISS/200 4782 CONNECT cat.sv.us.criteo.com:443 glenio.11622x DIRECT/74.119.117.66 - 1481643235.147 71071 172.16.0.109 TCP_MISS/200 19074 CONNECT googleads.g.doubleclick.net:443 glenio.11622x DIRECT/216.58.202.194 - 1481643266.724 248716 172.16.0.109 TCP_MISS/200 11788 CONNECT ad.doubleclick.net:443 glenio.11622x DIRECT/216.58.202.38 - 1481643268.463 250220 172.16.0.109 TCP_MISS/200 5374 CONNECT pagead2.googlesyndication.com:443 glenio.11622x DIRECT/216.58.202.194 - 1481643271.114 250473 172.16.0.109 TCP_MISS/200 10624 CONNECT i.ytimg.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643271.331 250620 172.16.0.109 TCP_MISS/200 5101 CONNECT www.google.com.br:443 glenio.11622x DIRECT/216.58.202.35 - 1481643273.126 3 172.16.0.109 TCP_DENIED/407 3478 CONNECT 187.52.105.133:13111 - NONE/- text/html 1481643276.530 287642 172.16.0.109 TCP_MISS/200 24415 CONNECT i1.ytimg.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643278.409 290185 172.16.0.109 TCP_MISS/200 821009 CONNECT s.ytimg.com:443 glenio.11622x DIRECT/216.58.202.110 - 1481643291.199 265268 172.16.0.109 TCP_MISS/200 15594 CONNECT googleads.g.doubleclick.net:443 glenio.11622x DIRECT/216.58.202.194 - 1481643302.890 273197 172.16.0.109 TCP_MISS/200 5840 CONNECT content.googleapis.com:443 glenio.11622x DIRECT/172.217.28.138 - 1481643326.272 224285 172.16.0.109 TCP_MISS/200 310199 CONNECT www.google.com.br:443 glenio.11622x DIRECT/216.58.202.35 - 1481643342.350 245550 172.16.0.109 TCP_MISS/200 4795 CONNECT clients1.google.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643351.274 190932 172.16.0.109 TCP_MISS/200 5127 CONNECT ssl.google-analytics.com:443 - DIRECT/216.58.202.40 - 1481643365.276 194251 172.16.0.109 TCP_MISS/200 4530 CONNECT cm.g.doubleclick.net:443 glenio.11622x DIRECT/216.58.222.34 - 1481643367.278 196642 172.16.0.109 TCP_MISS/200 4602 CONNECT stats.g.doubleclick.net:443 glenio.11622x DIRECT/64.233.186.157 - 1481643367.279 194065 172.16.0.109 TCP_MISS/200 4262 CONNECT www.google.com:443 glenio.11622x DIRECT/216.58.202.36 - 1481643380.272 207044 172.16.0.109 TCP_MISS/200 8962 CONNECT tpc.googlesyndication.com:443 glenio.11622x DIRECT/216.58.202.33 - 1481643409.281 201612 172.16.0.109 TCP_MISS/200 5397 CONNECT csi.gstatic.com:443 glenio.11622x DIRECT/216.58.204.35 - 1481643440.283 286442 172.16.0.109 TCP_MISS/200 5806 CONNECT pagead2.googlesyndication.com:443 glenio.11622x DIRECT/216.58.202.194 - 1481643448.539 472862 172.16.0.109 TCP_MISS/200 77434 CONNECT www.youtube.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643457.560 439311 172.16.0.109 TCP_MISS/200 9297 CONNECT s.youtube.com:443 glenio.11622x DIRECT/216.58.202.46 - 1481643491.634 3 172.16.0.109 TCP_DENIED/407 3478 CONNECT 187.52.105.133:13111 - NONE/- text/html 1481643573.208 3 172.16.0.109 TCP_DENIED/407 3478 CONNECT 187.52.105.133:13111 - NONE/- text/HTML Log do SQUID final ... Glênio Côrtes Himmen Super. Municipal de Trânsito de Aparecida glenio.11622x(a)aparecida.go.gov.br

1 0

Auto-Re: Site Youtube!
by 江明 13 Dec '16

13 Dec '16

邮件收到

1 0

Auto-Re: Ntp e IpTables!
by zhangjie＠beijing101.com 28 Nov '16

28 Nov '16

谢谢您的来信，我已经收到，并将尽快回复。祝您工作顺利！张杰

1 0

Ntp e IpTables!
by Glênio Côrtes Himmen 28 Nov '16

28 Nov '16

Gostaria de reacender esta discussão, estive meio atarefado estes dias sem conseguir olhar esta situação antes. Implementei as regras abaixo, parei o servidor de NTP do firewall, atualizei a hora dele pelo endereço 200 abaixo e dei um restart no serviço NTPD. #Liberar porta NTP para o firewall se atualizar e as máquinas atualizarem pelo firewall... inicio... $IPT -A INPUT -s 78.46.37.9 -p udp --dport 123 -j ACCEPT $IPT -A OUTPUT -d 78.46.37.9 -p udp --dport 123 -j ACCEPT $IPT -A INPUT -s 200.189.40.8 -p udp --dport 123 -j ACCEPT $IPT -A OUTPUT -d 200.189.40.8 -p udp --dport 123 -j ACCEPT $IPT -A INPUT -s 172.16.0.0/25 -p udp --dport 123 -j ACCEPT $IPT -A OUTPUT -d 172.16.0.0/25 -p udp --sport 123 -j ACCEPT #Liberar porta NTP para o firewall se atualizar e as máquinas atualizarem pelo firewall... final... Ao voltar para o Windows e pedir para se atualizar pela Internet, tendo sido especificado no campo onde fica time.windows.com o endereço do Proxy, recebo a mensagem abaixo descrita. Erro enquanto o Windows estava sincronizando com 172.16.0.4. O serviço de mesmo nível de protocolo não está acessível. O endereço 78.46.37.9 corresponde ao servidor da Centos, e o endereço 200.189.40.8 corresponde ao servidor b.ntp.br Tenho firewall do kaspersky habilitado no Windows mas editei a regra de UDP de entrada e liberei a porta 123. Glênio Côrtes Himmen Super. Municipal de Trânsito de Aparecida glenio.11622x(a)aparecida.go.gov.br -----Mensagem original----- De: CentOS-pt-br [mailto:centos-pt-br-bounces@centos.org] Em nome de centos-pt-br-request(a)centos.org Enviada em: quarta-feira, 23 de novembro de 2016 10:00 Para: centos-pt-br(a)centos.org Assunto: Digest CentOS-pt-br, volume 115, assunto 3 Enviar submissões para a lista de discussão CentOS-pt-br para centos-pt-br(a)centos.org Para se cadastrar ou descadastrar via WWW, visite o endereço https://lists.centos.org/mailman/listinfo/centos-pt-br ou, via email, envie uma mensagem com a palavra 'help' no assunto ou corpo da mensagem para centos-pt-br-request(a)centos.org Você poderá entrar em contato com a pessoa que gerencia a lista pelo endereço centos-pt-br-owner(a)centos.org Quando responder, por favor edite sua linha Assunto assim ela será mais específica que "Re: Contents of CentOS-pt-br digest..." Tópicos de Hoje: 1. Re: Iptables! (Marcelo Beckmann) ---------------------------------------------------------------------- Message: 1 Date: Tue, 22 Nov 2016 17:51:15 -0200 From: Marcelo Beckmann <marcelobeckmann(a)bsd.com.br> To: "Portuguese (Brazilian) CentOS mailing list" <centos-pt-br(a)centos.org> Subject: Re: [CentOS-pt-br] Iptables! Message-ID: <CAMZoB+ju+aBJMBT4em3OGMLqv2RYJMXcfNQ7xbO=q8Ui3De5zw(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Em 16 de novembro de 2016 14:24, Glenio Cortes Himmen < glenio.11622x(a)aparecida.go.gov.br> escreveu: > Amigos da lista, > > Abaixo tenho uma regra que libera determinados IP's da minha rede para > passarem direto para um determinado site em determinadas portas que > roda uma aplicação. > > Sei que tem como converter essa regra de maneira que o meu firewall > possa acessar o site time.windows.com na porta de NTP para atualizar a > hora, só que eu não sei como fazer. > > Se for para o próprio firewall fazer o acesso, então isso é tratado nas cadeias INPUT e OUTPUT, por exemplo: Obtendo o IP do destino ]$ dig +short time.windows.com time.microsoft.akadns.net. 13.89.46.24 iptables -A INPUT -s 13.89.46.24 -p udp --dport 123 -j ACCEPT iptables -A OUTPUT -d 13.89.46.24 -p udp --dport 123 -j ACCEPT Para o Brasil eu prefiro usar IPs de servidores ntp no Brasil mesmo, ao invés do time.windows.com. No caso eu utilizo no meu /etc/ntp.conf server 200.144.121.33 server 200.192.112.8 server 200.135.0.3 E adaptando as regras de iptables para esses IPs. > Gostaria também de criar essa regra permitindo que todos da minha rede > acessem o firewall na porta NTP para se atualizarem. > Para permitir a sua rede interna consultar o ntp do próprio firewall, você pode fazer a regra casando com a interface de rede da rede interna e/ou o endereço da rede interna e a porta, por exemplo: iptables -A INPUT -i ethX -p udp --dport 123 -j ACCEPT iptables -A OUTPUT -i ethX -p udp --sport 123 -j ACCEPT ou iptables -A INPUT -s 192.168.0.0/24 -p udp --dport 123 -j ACCEPT iptables -A OUTPUT -d 192.168.0.0/24 -p udp --sport 123 -j ACCEPT adaptando ethX e 192.168.0.0/24 para o seu ambiente > > Sei que poderia também criar a regra para que todas passem direto > nesta porta, mas é melhor não, para não sobrecarregar a NET aqui. > Rede interna passando pelo firewall e saindo para a internet então você trata na FORWARD. Exemplo: iptables -A FORWARD -s 192.168.0.0/24 -d 13.89.46.24 -p udp --dport 123 -j ACCEPT iptables -A FORWARD -d 192.168.0.0/24 -s 13.89.46.24 -p udp --sport 123 -j ACCEPT Essas regras podem variar dependendo da política default e da ordem das regras, regras já existentes antes, etc.. > > Vocês podem me ajudar? > > A regra é $IPT -t filter -A FORWARD -s $i -d 177.135.250.61 -p udp -m > multiport --dport 3050,3051,5836,5837,725 -j ACCEPT > > Glênio Côrtes Himmen > Super. Municipal de Trânsito de Aparecida > glenio.11622x(a)aparecida.go.gov.br > > -------------- Próxima Parte ---------- Um anexo em HTML foi limpo... URL: <http://lists.centos.org/pipermail/centos-pt-br/attachments/20161122/874c54a 2/attachment-0001.html> ------------------------------ Subject: Legenda do Digest _______________________________________________ CentOS-pt-br mailing list CentOS-pt-br(a)centos.org https://lists.centos.org/mailman/listinfo/centos-pt-br ------------------------------ Fim da Digest CentOS-pt-br, volume 115, assunto 3 *************************************************

1 0

← Newer
1
2
3
4
5
6
7
8
9
...
153
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

discuss-pt-br