Bloquear MSN com Squid

malucouto · Enviada: Seg Nov 27, 2006 9:37 am Assunto: Bloquear MSN com Squid

Pessoal,

Bom Dia,

Já faz um bom tempo que não necessito postar nada aqui no forum, principalmente porque praticamente todas as minhas duvidas já foram praticamente postadas aqui por outras pessoas! No entanto estou com um problema para bloquear o msn aqui na empresa onde trabalho, utilizando o squid, logo abaixo segue a configuração do meu squid.conf, caso alguem possa me ajudar eu agradeço!

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

acl blockedsites url_regex -i "/etc/squid/bloqueados/block.txt"
acl unblockedsites url_regex -i "/etc/squid/bloqueados/unblock.txt"
acl msn dstdomain loginnet.passport.com
acl msnmessenger url_regex -i gateway.dll
acl msnm req_mime_type -i ^application/x-msn-messenger$
acl webmsn dstdomain webmessenger.msn.com

acl all src 172.22.1.0/255.255.255.0
acl manager proto cache_object
acl chefes src 172.22.1.5 172.22.1.24 172.22.1.13 172.22.1.28 172.22.1.1 172.22.1.17 172.22.1.14 172.22.1.4 172.22.1.34
acl usuarios src 172.22.1.60 172.22.1.32
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl download url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .rpm .zip .rar .avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav .mov .iso
acl SSL_ports port 443 563
acl Safe_ports port 8080 # http
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
#acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 2631 # CAIXA-conectividadesocial
acl Safe_ports port 137-139 #netbios
acl Safe_ports port 2083 #webBazarguri

acl CONNECT method CONNECT
http_access deny msn
http_access deny msnm
http_access deny msnmessenger
http_access deny webmsn

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow chefes
http_access deny blockedsites !unblockedsites

http_access allow usuarios
http_access allow all

http_reply_access allow all
#http_access allow rede_interna
#numero de regras para limitar banda
delay_pools 3

# Primeiro controle
delay_class 1 1

# -1/-1 significa que não teremos limites para a delay pool 1
#delay_parameters 1 -1/-1 -1/-1
delay_parameters 1 60000/60000 60000/60000
delay_access 1 allow chefes

# Segundo controle
delay_class 2 1

delay_parameters 2 20000/20000 20000/20000
delay_access 2 allow usuarios

# Terceiro controle
delay_class 3 1

# Limita a sua banda para +- 64Kbits
delay_parameters 3 12800/12800 12800/128000
delay_access 3 allow all

icp_access allow all
coredump_dir /var/spool/squid

httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

visible_hostname bazarguri.linux.com.br

JPaulo · Enviada: Seg Dez 04, 2006 12:23 pm Assunto: Re: Bloquear MSN com Squid

Com estas regras não é possível fazer o bloqueio do MSN Live, em sua versão anterior ainda conseguia bloquear. Mesmo fazendo o bloqueio da porta 1863 com iptables ele é acessado.
Alguem tem alguma dica???
_________________
João Paulo Guimarães

Slispd · Enviada: Seg Dez 04, 2006 1:45 pm Assunto: Bloqueando msn!!

Cara o msn é uma luta pq tem 300 endereços para serem blokeados.

Vc pode fazer em cada máquina assim:

Localize o Arquivos HOSTS do computador que deseja bloquear!
Abra no bloco de notas!

Abaixo de 127.0.0.1 localhost adicione as seguintes linhas:

127.0.0.1 gtwy.messenger.hotmail.com
127.0.0.1 gateway.messenger.hotmail.com
127.0.0.1 messenger.hotmail.com

Assim vc blokeia na propria maquina o msn.

Agora se vc usa squid: tem alguns endereços a blokiar vou postális abaixo!

http1.msgr.hotmail.com
http2.msgr.hotmail.com
http3.msgr.hotmail.com
http4.msgr.hotmail.com
http5.msgr.hotmail.com
http6.msgr.hotmail.com
http7.msgr.hotmail.com
http8.msgr.hotmail.com
http9.msgr.hotmail.com
http10.msgr.hotmailcom
http11.msgr.hotmail.com
http12.msgr.hotmail.com
http13.msgrhotmail.com
http14.msgr.hotmail.com
http15.msgr.hotmail.com
http16.msgr.hotmail.com
http17.msgr.hotmail.com
http18.msgr.hotmail.com
http19.msgr.hotmail.com
http20.msgr.hotmail.com
gateway.messenger.hotmail.com
msgr.hotmail.com
http://www.webmessenger.com.br
www.webmessenger.com.br
torperkut.com
orkut.com
passport.com
msn.com.br
msn.com
wbmsn.net
msn2go.com
sc.msn.com
www.msn.be
iloveim.com
iloveim.co.uk
imaginarlo.com
unipeak.com
webproxy.kaxy.com
browseatwork.com
ibypass.com
tunnel.com
mesfoddsuckin.com
entermes.nut.net
herpessuck.com
suckinmeinmess.com
browseatwork1.com
turnofftheinternet.com
filterxp.com
filter2005.com
wproxy.com
orkat.tz4.com
piglet-im.com
thevirtualbrowser.com
gibeo.net
anonycat.com
jeegol.com
clientless.net
vtunnel.com
spynot.com
bhi.com
audiowtcher.com
toperkut.com
safeforwork.net
backfox.com
b3u.net
atunnel.com
biatches.org
freedandbarker.com
chickenkiller.com
dongtainwang.com
messenger.msn.com.br
webmessenger.msn.com
accountservices.msn.com
accountservices.passport.net
jabber.org
yonoy.com
webmsn.net
phonefox.com
jaimy.us
universia.es
centova.net
jabbix.net
linux.mty.itesm.mx
nickname.msn.com.br
e-messenger.net
chat.msn.com
chat.msn.com.br
effetech.com
etherdetect.com
filekicker.com
https.meebo.com
meebo.com
anonymizer.com
anticomintern.jp.land.to
antio.co.uk
arrow.or.tv
balancer.iloveim.com
cs.whho.net
g18c.mydns.jp
hohohoi.net
indianproxy.com
jabber.meta.net.nz
kanako.at.infoseek.co.jp
kickme.to
Kproxy.com
kupu-jp.com
mbm3550nl1n3.siteburg.com
mikuni-love.net
ore.to
poloicq.cjb.net
popup8.tok2.com
proxy.org
siobaru.ddo.jp
steru123.s70.xrea.com
teser.sakura.ne.jp
trick.zapto.org
wgoal.com
wm.jabbernet.dk
aerosky.net
age.jp
anonster.com
anonym.to
antion.co.uk
bhi.com.br
blockedsuks.co.nr
cgi-proxy.net
chat-sigilo.kit.net
chrishemple.co.uk
douradina.pr.gov.br
freepgs.com
guardster.com
hidemyass.com
hmfarm.kit.net
kolikoli.tk
mangeloo.com
mastaline.com
maxpax.net
messbrasil.com.br
momo.dyndns.org
myg.or.jp
nopath.com
nurs.or.jp
orcit.com
orcut.com
orku.com.br
piglet.0900provider.nl
pimpmyip.com
pikki.mydns.jp
polokut.cjb.net
proxify.com
publicproxyservers.com
rabbitandpork.com
racewarkingdoms.com
researchhaven.com
saturn64bit.us
tya.1st.ne.jp
webtal.com.br
tok2.com
big.or.jp
vc-net.ne.jp
zimage.dk
proxyfi.com
anonysite.com
secure-tunnel.com
http://www.torperkut.com
www.torperkut.com
gtwy.messenger.hotmail.com
gateway.hotmail.com
messenger.hotmail.com
webmessenger.msn.com
e-messenger.net
webmessenger.com
msn.es
msn.it
msn.co.ip
iloveim.com
zimane.dk
msn2go.com
server2.msnger.com
onlinemessenger.nl
login.passport.net
msn.com
msn.com.br
msnger.com
centova.net
piglet-im.com
clientess.net
msnanywhere.com
mastaline.com
bhi.com.br/teste
softpedia.com/progDownload/dMSN-Messenger-Download-3682.html
phonofox.com
wm.jabbernet.dk
psi.affinix.com
hopster.com
poloicq.cjb.net
antio.co.uk
miranda-im.com
linux.mty.itesm.mx
msnpiki.msnfanatic.com
meebo.com
mastaline.com
orkut.com
maxpax.net
orkat.tz4.com
linkblog.com.br
orkutetive.com.br
orkut-brasil.com
images.orkut.com
gazzag.com
gaia.terra.com.br
inutilidades.hex.com.br
thevirtualbrowser.com
kryptonian-x.blogspot.com
kryptonian-x.blogspot.com/2005/proxy-bypasser.html
linkblog.com.br
guj.com.br
linkblog.com.br/novoPost.jsp?acao=voltar&link=
linkblog.com.br/novoPost.jsp?acao=fechar&link=
proxify.com
unipeak.com
kproxy.com
publicproxyservers.com
orkutproxy.com
browseatwork.com
publicproxyservers.com/page1.html
publicproxyservers.com/page2.html
publicproxyservers.com/page3.html
publicproxyservers.com/page4.html
publicproxyservers.com/page5.html
xanproxy.br
ieproxy.com
techtakeover.com/search
spysurfing.com
myfreeproxy.com
wordwideproxy.com
proxyfree.com
netsack.com
afreeproxy.com
cgi-proxy.com
coveredtracks.com/homepage.php
easyproxy.org
privatizer.net
secure-tunnel.com
spiderproxy.com
proxy7.com
webwarper.net
chronicpulse.net
space.net.au/%Ethomas/quickbrowse.html
space.net.au
proxyking.net
w3privacy.com
freeproxy.us
goproxing.com
200.153.74.133
200.103.49.114
85.184.4.2
85.184.4.3
85.184.4.4
85.184.4.5
85.184.4.6
85.184.4.7
85.184.4.8
85.184.4.9
85.184.4.10
85.184.4.11
85.184.4.12
85.184.4.13
85.184.4.14
72.36.146.44
212.26.216.243
212.126.66.20
212.227.62.18
216.32.66.235
216.32.66.236
216.32.84.237
216.129.113.25
193.238.160.62
193.238.160.71
193.238.160.91
193.238.160.92
193.238.160.93
193.238.160.94
69.36.226.132
69.36.226.133
69.36.226.134
69.36.226.141
69.36.226.143
69.36.226.170
69.36.226.175
69.36.226.185
69.93.145.66
64.92.173.122
216.129.112.81
216.129.112.86
216.129.112.91
216.129.112.96
216.129.112.111
216.129.112.116
216.129.112.121
216.129.112.10
216.129.112.15
216.129.112.20
216.129.112.25
216.129.112.30
216.129.112.35
216.129.112.40
216.129.112.45
216.129.112.50
216.129.112.55
216.129.112.12
64.233.171.85
64.233.171.86
66.49.178.233
200.185.117.4
200.176.3.143
www.riomafra.com.br
www.cidadetop.com
www.legalvc.com.br
www.youtube.com
http://radio.terra.com.br/
http://radio.musica.uol.com.br/

Com isso acredito que bloqueie! tem alguns endereços no meio que nao sao do msn mas fikei com preguiça de tirar :)