Юзер авторизуется на прокси через ад
Конфиг сквида
Конфиг режика#Redirector=======================================================================================
url_rewrite_program /usr/local/rejik3/redirector /usr/local/rejik3/redirector.conf
url_rewrite_children 15
#=================================NTLM AUTHORIZATION==============================================
auth_param ntlm program /usr/local/bin/ntlm_auth \
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm keep_alive on
auth_param basic program /usr/local/bin/ntlm_auth \
--helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid Proxy-Server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
#================Polzovateli=====================================================================
acl authusers proxy_auth REQUIRED
#================Ports===========================================================================
#================SSL=============================================================================
acl SSL_ports port 443
#================HTTP============================================================================
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
#================BLOKIROVKI======================================================================
#acl social dstdomain "/usr/local/etc/squid/block/social_networks/domains"
#acl deti dstdomain .sm-deti.ru
#http_access deny authusers social
#http_access deny authusers deti
#================Razresheniya====================================================================
http_access allow authusers
#====================PORT PODKLYUCHENIYA K PROXY==================================================
http_port 3128
#====================Damp edra ===================================================================
coredump_dir /var/squid/cache
#==================== Nastroyki Casha============================================================
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
Лог редиректораerror_log /usr/local/rejik3/redirector.err
change_log /usr/local/rejik3/redirector.log
make-cache /usr/local/rejik3/make-cache
#allow_urls /usr/local/rejik3/banlists/allow_urls
#write_hostname_to_log on
<Social>
ban_dir /usr/local/rejik3/banlists/social/
url http://www.sm-deti.ru
#log off
<PORNO>
ban_dir /usr/local/rejik3/banlists/porno
url http://www.google.com
<MP3>
ban_dir /usr/local/rejik3/banlists/mp3
url http://127.0.0.1/ban/mp3.html
<JS>
ban_dir /usr/local/rejik3/banlists/js
url http://127.0.0.1/ban/js.js
#log off
При переходе на ссылку, которая лежит в банлистах ничего не происходит, юзер попадает куда хочет.2016-03-16 11:34:32 [5982] Run make-cache (3.2.11)
2016-03-16 11:34:32 [5981] Redirector start and working (3.2.11)
2016-03-16 11:34:32 [5982] Make-cache finished
2016-03-16 11:34:32 [5982] Redirector start and working (3.2.11)
2016-03-16 11:34:32 [5985] Run make-cache (3.2.11)
2016-03-16 11:34:32 [5985] Make-cache finished
2016-03-16 11:34:32 [5985] Redirector start and working (3.2.11)
2016-03-16 11:34:32 [5986] Run make-cache (3.2.11)
2016-03-16 11:34:32 [5986] Make-cache finished
2016-03-16 11:34:32 [5986] Redirector start and working (3.2.11)
Помогите поправить руки. Ниразу не использовал редиректор.
Запреты через squid работаю нормально.
Всё установлено из портов.
Предположение:
Может блэклисты неподходящию режику запихиваю?
Качал с сайта squidguard.
О системе:
FreeBSD 10.2-RELEASE
squid-3.5.13
rejik-3.2.11_1