Tashoshin Squid biyu na iya samun jerin wuraren da aka yarda daban-daban

Haɗa localport da ACL ɗin wurin da ya dace a kowace ƙa'idar allow, tare da kiyaye hane-hanen da suka gabata da ƙa'idar deny ta ƙarshe.

ACL localport na Squid yana daidaita da tashar da Squid ya karɓi haɗin. Haɗa shi da ACL ɗin wurin da ya dace domin kowane mai sauraro ya ba da izinin jerinsa kaɗai.

Don saitin Squid 6 ko 7 da ke da hane-hanen abokin ciniki da tashoshi masu aminci:

http_port 3128
http_port 3129

acl approved_clients src 192.0.2.0/24
acl main_listener localport 3128
acl alternate_listener localport 3129
acl main_sites dstdomain "/etc/squid/main-sites.txt"
acl alternate_sites dstdomain "/etc/squid/alternate-sites.txt"

http_access allow approved_clients main_listener main_sites
http_access allow approved_clients alternate_listener alternate_sites
http_access deny all

Maye gurbin kewayon abokin ciniki na takardun da ainihin abokan cinikin da aka ba su izini kuma shirya fayilolin jerin yanki biyu. Sanya ƙa'idodin allow ɗin da aka haɗa bayan gwaje-gwajen deny da ake buƙata a shigarwar kuma kafin deny na ƙarshe. Kiyaye hane-hanen tashoshi marasa aminci, CONNECT da gudanarwa.

Ana haɗa sunayen ACL a kan ƙa'idar shiga ɗaya da AND. Ƙa'idodin allow daban suna ba da zaɓuɓɓuka. Idan an bar sharar mai sauraro daga ƙa'idodin wurin, kowane jeri zai wuce ta kowace tasha.

Duba ƙa'idodin da suka gabata ma: babban allow da ya yi daidai da farko yana hana a auna waɗannan hane-hanen na baya. Gwada wuraren da aka yarda da waɗanda aka hana ta kowane mai sauraro don tabbatar da iyaka.

localport ba tashar gidan yanar gizo ba ce ko tashar tushen abokin ciniki ta wucin gadi. Sharar tashar wuri tana amfani da ACL port maimakon.

Labarai masu alaƙa