{"id":270,"date":"2011-10-18T23:17:33","date_gmt":"2011-10-18T21:17:33","guid":{"rendered":"http:\/\/diablo.craem.net\/wordpress\/?p=270"},"modified":"2011-10-18T23:17:33","modified_gmt":"2011-10-18T21:17:33","slug":"squid-active-directory-parte-4","status":"publish","type":"post","link":"https:\/\/diablo.craem.net\/?p=270","title":{"rendered":"Squid + Active Directory ::parte 4::"},"content":{"rendered":"

Ahora nos toca configurar el squid…. suponemos que tenemos un grupo de usuarios en la empresa que no queremos que accedan al facebook, twitter y alguna red social m\u00e1s:
\neditamos el fichero \/etc\/init.d\/squid.conf<\/em> y lo dejamos tal que:
\n
\nauth_param ntlm program \/usr\/bin\/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
\nauth_param ntlm children 5
\nauth_param ntlm keep_alive on
\nauth_param basic program \/usr\/bin\/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
\nauth_param basic children 5
\nauth_param basic realm Squid proxy-caching web server
\nauth_param basic credentialsttl 2 hours
\nauth_param basic casesensitive off
\nacl authenticated proxy_auth REQUIRED
\n########################################
\n## definimos puertos navegacion
\n########################################
\nacl https proto https
\nacl port_80 port 80
\nacl bad url_regex \"\/etc\/squid\/squid_block.acl\" # webs bloqueadas a todos
\nacl webs_redes_sociales url_regex \"\/etc\/squid\/webs_redes_sociales.acl\"
\nacl usuarios_sin_redes_sociales proxy_auth \"\/etc\/squid\/usuarios_sin_redesociales.acl\"
\nacl authenticated proxy_auth REQUIRED
\nhttps_access deny https port_80 webs_redes_sociales usuarios_sin_redes_sociales
\nhttps_access allow authenticated
\nhttps_access deny bad
\nacl all src all
\nacl manager proto cache_object
\nacl localhost src 127.0.0.1\/32
\nacl to_localhost dst 127.0.0.0\/8
\naccess_log \/var\/log\/squid\/access.log squid
\n#
\n<\/code>
\nEmpezamos definiendo ficheros en \/etc\/squid<\/em>
\nWebs bloqueadas a todos, por ejemplo pornotube…. (sin palabras)
\n
\n# nano \/etc\/squid\/squid_block.acl
\n<\/code>
\ny a\u00f1adimos
\n
\npornotube
\nyoutube
\nplanetacom
\nsex
\n<\/code>
\nSi ponemos algo que contenga estas palabras, sencillamente lo bloquear\u00e1 \ud83d\ude42
\nAhora creamos el fichero \/etc\/squid\/webs_redes_sociales.acl<\/em> que contendr\u00e1 la lista de las webs a bloquear de redes sociales.
\n
\nnano \/etc\/squid\/webs_redes_sociales.acl
\n<\/code>
\ny a\u00f1adimos
\n
\nfacebook
\nhotmail
\ngmail
\nmsn
\nyahoo
\nforo
\ntwitter
\ntuit
\n<\/code>
\nY ahora la lista de usuarios para bloquear…
\n
\n# nano \/etc\/squid\/usuarios_sin_redesociales.acl
\n<\/code>
\ny a capar \ud83d\ude42
\n
\nmanolito.gafotas
\npepito.perez
\nmaria.delao
\n<\/code>
\nhacemos un reload y listo \ud83d\ude42
\n
\n# \/etc\/init.d\/squid force-reload
\n<\/code>
\nY el resto, con imaginaci\u00f3n<\/p>\n","protected":false},"excerpt":{"rendered":"

Ahora nos toca configurar el squid…. suponemos que tenemos un grupo de usuarios en la empresa que no queremos que accedan al facebook, twitter y alguna red social m\u00e1s: editamos el fichero \/etc\/init.d\/squid.conf y lo dejamos tal que: auth_param ntlm program \/usr\/bin\/ntlm_auth –helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 5 auth_param ntlm keep_alive on auth_param basic program \/usr\/bin\/ntlm_auth […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[16,58,97,102,177],"class_list":["post-270","post","type-post","status-publish","format-standard","hentry","category-linux","tag-active-directory","tag-debian","tag-kerberos","tag-linux-2","tag-squid"],"_links":{"self":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/posts\/270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=270"}],"version-history":[{"count":0,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=\/wp\/v2\/posts\/270\/revisions"}],"wp:attachment":[{"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/diablo.craem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}