http://www.DoMsN.net http://www.madcn.com/blog/templates/madblog2/images/icon_power.png http://www.DoMsN.net/exurl.php/reply/649.html 2008-04-24T21:57:04 +0800 http://www.DoMsN.net/exurl.php/reply/648.html
1. жÔØRedHatÉÏÔ­ÓеÄMySqlµÄÀÏ°æ±¾.±¾ÈËAS4ÉÏÊÇÔ­ÓÐÁËMysql4.

1> ÓÃ" rpm -qa | grep mysql " ²é¿´°²×°ÁËmysqlµÄÄÄЩ×é¼þ.¿´Çå³þÓÐÄÄЩ×é¼þÃû,ÔÚµÚ¶þ²½Ð¶ÔØÖÐʹÓÃ.

2> ÓÃ" rpm -evv <×é¼þÃû> "ÍêȫжÔØ. ÆäÖм¸¸ö×é¼þ˵ȱÉÙ ***.so.10ɶµÄ,¾ÍÐèÒªÓÃ" rpm -e --nodeps <×é¼þÃû> "Ç¿ÖÆжÔØ.µ½´ËжÔØÍê±Ï.



2. °²×°Mysql5.

1> ÖØÒª!¹Ø±Õselinux.·ñÔò°²×°µÄʱºò,mysqlÎÞ·¨Á¬½Ó³É¹¦µÄ.¹Ø±Õ·½·¨:¸ü¸Ä/etc/selinux/configÖеÄSELINUX=enforcingΪSELINUX=disabled.ÖØÐÂÆô¶¯,ÓÃÃüÁîsestatusÈ·¶¨selinuxÒѹرÕ.

2> ÏÂÔØmysql5µÄrpm°ü(www.mysql.com).±¾ÈË»úÆ÷ÊÇRed Hat Enterprise Linux 4 RPM (x86).ËùÒÔÔÚ¶ÔÓ¦µÄÀ¸Ä¿ÀïÃæÏÂÔضÔÓ¦µÄserverºÍclient.

server:http://mysql.cdpa.nsysu.edu.tw/Downloads/MySQL-5.0/MySQL-server-community-5.0.51a-0.rhel4.i386.rpm

client: http://mysql.cdpa.nsysu.edu.tw/Downloads/MySQL-5.0/MySQL-client-community-5.0.51a-0.rhel4.i386.rpm

3> ÏÈÓÃ"rpm -ivh <ÎļþÃû>"°²×°server,ÔÙÓÃ"rpm -ivh <ÎļþÃû>"°²×°client.

4> ÓÃ"service mysql restart"ÖØÐÂÆô¶¯mysql.¿´ÊÇ·ñ°²×°³É¹¦.

5> ÉèÖÃrootÃÜÂë,½øÈë/usr/binĿ¼,Ö´ÐÐ"mysqladmin -u root -p password 123456"ÆäÖÐ123456¾ÍÊÇÄãµÄÃÜÂë.ÓÃ"service mysql restart"ÖØÐÂÆô¶¯mysql.

6> ²âÊÔ,ÓÃ"mysql -h localhost -u root -p"µÇ½mysqlÊý¾Ý¿â.ÓÃ"show databases;"²é¿´Êý¾Ý¿â.µ½´ËMySql5°²×°Íê±Ï.



3. Ô¶³Ì·ÃÎʹÜÀí.

MysqlĬÈÏÖ»Äܱ¾»ú·ÃÎÊ.Èç¹ûÐèÒªÆäËû»úÆ÷Ô¶³Ì·ÃÎÊ,ÐèÒªÉèÖÃ.

1> Ôö¼ÓÒ»¸öÓû§,ÓÃÀ´½øÐÐÔ¶³ÌµÇ½.ÓÃÉÏ·½·¨6ÖеÄlocalhostµÇ½mysql,Ö´ÐÐsqlÓï¾ä" GRANT ALL PRIVILEGES ON *.* TO 'myuser'@'%' IDENTIFIED BY 'mypassword' WITH GRANT OPTION; "Ôö¼ÓÒ»¸öÓû§ÃûΪmyuser,ÃÜÂëΪmypassword.ÆäÖеÄ"%"±íʾËùÓлúÆ÷¶¼¿ÉÒÔ·ÃÎÊ.ÓÃÉÏ·½·¨4ÖØÐÂÆô¶¯MySql.

2> ÕâÑù¹ýºó,ÔÚ±¾»úÉÏ¿ÉÒÔÓÃÃüÁî"mysql -h <×Ô¼º»úÆ÷µÄIP> -u myuser -p"À´µÇ½MySql.˵Ã÷ÉèÖóɹ¦.

3> ×îÖØÒªÒ»µã.ÄãÕâ¸öʱºò¿ÉÒÔ·¢ÏÖ,ÔÚ±¾»úÆ÷ÉÏ¿ÉÒÔÁ¬½ÓMySql.µ«ÊÇÔÚÆäËû»úÆ÷ÉÏÓÃÏàͬ·½·¨,»á³öÏÖ" Can't connect to MySQL server on '9.186.100.178' (10065)"µÄ´íÎó.·ÖÎöÔ­ÒòÊÇAS4µÄ·À»ðǽµ¼ÖÂ.ÓÃÏÂÃæ·½·¨ÉèÖ÷À»ðǽ:´ò¿ªÎļþ/etc/sysconfig/iptables,ÔÚ×îºóÒ»Ìõ֮ǰ¼ÓÒ»Ìõ:-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT. È»ºóÖ´ÐÐ /etc/init.d/iptables restart. ÖÁ´ËÉèÖÃAS4·À»ðǽÍê±Ï.

ÏÖÔÚ,Äú¾Í¿ÉÒÔÔÚÆäËûµÄ»úÆ÷ÉÏÓÃMySqlµÄclient¶Ë·ÃÎʸÃÊý¾Ý¿âÁË,µÇ½·½·¨»¹ÊÇ"mysql -h <IP> -u myuser -p".µ«Èç¹û×ÜÓÃÕâ¸ö¿ØÖÆ̨¹ÜÀí×ܲ»Ë¬,½¨ÒéÓÃһЩ¹ÜÀíÈí¼þ¹ÜÀí¾ÍºÜ²»´íÁË,±¾ÈËÓõÄÊÇMySQL-Front,ºÜ²»´íµÄÈí¼þ.¿ÉÒÔÊÔÊÔ.´ó¼ÒÓÐʲôÎÊÌâ,ÇëÖ¸³ö,лл!

]]> 2008-04-11T22:46:00 +0800 http://www.DoMsN.net/exurl.php/reply/647.html 2008-03-20T09:32:03 +0800 http://www.DoMsN.net/exurl.php/reply/646.html
find /usr/sam -path "/usr/sam/dir1" -prune -o -print

find [-path ..] [expression] ÔÚ·¾¶ÁбíµÄºóÃæµÄÊDZí´ïʽ

-path "/usr/sam" -prune -o -print ÊÇ -path "/usr/sam" -a -prune -o
-print µÄ¼òд±í´ïʽ°´Ë³ÐòÇóÖµ, -a ºÍ -o ¶¼ÊǶÌ·ÇóÖµ£¬Óë shell µÄ && ºÍ || ÀàËÆÈç¹û -path "/usr/sam" ΪÕ棬ÔòÇóÖµ -prune , -prune ·µ»ØÕ棬ÓëÂß¼­±í´ïʽΪÕ棻·ñÔò²»ÇóÖµ -prune£¬ÓëÂß¼­±í´ïʽΪ¼Ù¡£Èç¹û -path "/usr/sam" -a -prune Ϊ¼Ù£¬ÔòÇóÖµ -print £¬-print·µ»ØÕ棬»òÂß¼­±í´ïʽΪÕ棻·ñÔò²»ÇóÖµ -print£¬»òÂß¼­±í´ïʽΪÕæ¡£

Õâ¸ö±í´ïʽ×éºÏÌØÀý¿ÉÒÔÓÃαÂëдΪ

if -path "/usr/sam" then
-prune
else
-print

±Ü¿ª¶à¸öÎļþ¼Ð

find /usr/sam \( -path /usr/sam/dir1 -o -path /usr/sam/file1 \) -prune -o -print

Ô²À¨ºÅ±íʾ±í´ïʽµÄ½áºÏ¡£
\ ±íʾÒýÓ㬼´Ö¸Ê¾ shell ²»¶ÔºóÃæµÄ×Ö·û×÷ÌØÊâ½âÊÍ£¬¶øÁô¸ø find ÃüÁîÈ¥½âÊÍÆäÒâÒå¡£

²éÕÒijһȷ¶¨Îļþ£¬-nameµÈÑ¡Ïî¼ÓÔÚ-o Ö®ºó

#find /usr/sam \(-path /usr/sam/dir1 -o -path /usr/sam/file1 \) -prune -o -name "temp" -print
]]> 2008-01-12T22:52:47 +0800 http://www.DoMsN.net/exurl.php/reply/645.html
8ΪÉ趨ֵ£¬ÕâÌõ¾ä×Ó»á×Ô¶¯½«netstat -an Öв鵽µÄÀ´×Ôͬһ£É£ÐµÄ³¬¹ýÒ»¶¨Á¿µÄÁ¬½ÓµÄÁÐÈë½ûÖ¹·¶Î§£¬8Ϊ·§Öµ
]]> 2008-01-12T22:50:15 +0800 http://www.DoMsN.net/exurl.php/reply/644.html
Ò»¡¢½¨Á¢DHCP·þÎñÆ÷ÅäÖÃÎļþ

¡¡¡¡¿ÉÒÔʹÓÃRedhat Linux 9.0×ÔÉíЯ´ørpm°ü°²×°¡£°²×°½áÊøºó, DHCP ¶Ë¿Ú¼à¶½³ÌÐò dhcpdÅäÖÃÎļþÊÇ/etcĿ¼ÖеÄÃûΪdhcpd.confµÄÎļþ¡£ÏÂÃæÊÖ¹¤½¨Á¢/etc/dhcpd.confÎļþ¡£/etc/dhcpd.confͨ³£°üÀ¨Èý²¿·Ö£ºparameters¡¢declarations ¡¢option¡£

¡¡¡¡1.DHCPÅäÖÃÎļþÖеÄparameters£¨²ÎÊý£©£º±íÃ÷ÈçºÎÖ´ÐÐÈÎÎñ£¬ÊÇ·ñÒªÖ´ÐÐÈÎÎñ£¬»ò½«ÄÄЩÍøÂçÅäÖÃÑ¡Ïî·¢Ë͸ø¿Í»§¡£Ö÷ÒªÄÚÈݼû±í1

²Î Êý ½â ÊÍ
ddns-update-style ÅäÖÃDHCP-DNS »¥¶¯¸üÐÂģʽ¡£
default-lease-time Ö¸¶¨È·Ê¡×âÁÞʱ¼äµÄ³¤¶È£¬µ¥Î»ÊÇÃë¡£
max-lease-time Ö¸¶¨×î´ó×âÁÞʱ¼ä³¤¶È£¬µ¥Î»ÊÇÃë¡£
hardware Ö¸¶¨Íø¿¨½Ó¿ÚÀàÐͺÍMACµØÖ·¡£
server-name ֪ͨDHCP¿Í»§·þÎñÆ÷Ãû³Æ¡£
get-lease-hostnames flag ¼ì²é¿Í»§¶ËʹÓõÄIPµØÖ·¡£
fixed-address ip ·ÖÅä¸ø¿Í»§¶ËÒ»¸ö¹Ì¶¨µÄµØÖ·¡£
authritative ¾Ü¾ø²»ÕýÈ·µÄIPµØÖ·µÄÒªÇó¡£


¡¡¡¡2. DHCPÅäÖÃÎļþÖеÄdeclarations £¨ÉùÃ÷£©£ºÓÃÀ´ÃèÊöÍøÂç²¼¾Ö¡¢Ìṩ¿Í»§µÄIPµØÖ·µÈ¡£Ö÷ÒªÄÚÈݼû±í2£º

Éù Ã÷ ½â ÊÍ
shared-network ÓÃÀ´¸æÖªÊÇ·ñһЩ×ÓÍøÂç·ÖÏíÏàͬÍøÂç¡£
subnet ÃèÊöÒ»¸öIPµØÖ·ÊÇ·ñÊôÓÚ¸Ã×ÓÍø¡£
range ÆðʼIP ÖÕÖ¹IP Ìṩ¶¯Ì¬·ÖÅäIP µÄ·¶Î§¡£
host Ö÷»úÃû³Æ ²Î¿¼ÌرðµÄÖ÷»ú¡£
group Ϊһ×é²ÎÊýÌṩÉùÃ÷¡£
allow unknown-clients;deny unknown-client ÊÇ·ñ¶¯Ì¬·ÖÅäIP¸øδ֪µÄʹÓÃÕß¡£
allow bootp;deny bootp ÊÇ·ñÏìÓ¦¼¤»î²éѯ¡£
allow booting;deny booting ÊÇ·ñÏìӦʹÓÃÕß²éѯ¡£
filename ¿ªÊ¼Æô¶¯ÎļþµÄÃû³Æ£¬Ó¦ÓÃÓÚÎÞÅ̹¤×÷Õ¾¡£
next-server ÉèÖ÷þÎñÆ÷´ÓÒýµ¼ÎļþÖÐ×°ÈçÖ÷»úÃû£¬Ó¦ÓÃÓÚÎÞÅ̹¤×÷Õ¾¡£


¡¡¡¡3. DHCPÅäÖÃÎļþÖеÄoption£¨Ñ¡Ï£ºÓÃÀ´ÅäÖÃDHCP¿ÉÑ¡²ÎÊý£¬È«²¿ÓÃoption¹Ø¼ü×Ö×÷Ϊ¿ªÊ¼£¬Ö÷ÒªÄÚÈÝ°üÀ¨¼û±í3£º

Ñ¡ Ïî ½â ÊÍ
subnet-mask Ϊ¿Í»§¶ËÉ趨×ÓÍøÑÚÂë¡£
domain-name Ϊ¿Í»§¶ËÖ¸Ã÷DNSÃû×Ö¡£
domain-name-servers Ϊ¿Í»§¶ËÖ¸Ã÷DNS·þÎñÆ÷IPµØÖ·¡£
host-name Ϊ¿Í»§¶ËÖ¸¶¨Ö÷»úÃû³Æ¡£
routers Ϊ¿Í»§¶ËÉ趨ĬÈÏÍø¹Ø¡£
broadcast-address Ϊ¿Í»§¶ËÉ趨¹ã²¥µØÖ·¡£
ntp-server Ϊ¿Í»§¶ËÉ趨ÍøÂçʱ¼ä·þÎñÆ÷IPµØÖ·¡£
time£­offset Ϊ¿Í»§¶ËÉ趨ºÍ¸ñÁÖÍþÖÎʱ¼äµÄÆ«ÒÆʱ¼ä£¬µ¥Î»ÊÇÃë¡£


¡¡¡¡×¢Ò⣺Èç¹û¿Í»§¶ËʹÓõÄÊÇÊÓ´°²Ù×÷ϵͳ£¬²»ÒªÑ¡Ôñ"host-name"Ñ¡Ï¼´²»ÒªÎªÆäÖ¸¶¨Ö÷»úÃû³Æ¡£

¡¡¡¡ÏÂÃæÊÇÒ»¸ö±ÊÕßʹÓõÄDHCPÅäÖÃÎļþ£¬ÕâÊÇÒ»¸ö£ÃÀàÍøÂ磬¹²126¸öIPµØÖ·¿ÉÒÔ·ÖÅäµÄÀý×Ó¡£¶ÁÕß¿ÉÒÔ¸´ÖƺóʹÓã¬×¢ÒâºìÉ«²¿·ÖÊDZØÐëÒªÐ޸ĵġ£



ddns-update-style interim;
ignore client-updates;

subnet 192.168.1.0 netmask 255.255.255.0 {

option routers 192.168.1.254;

option subnet-mask 255.255.255.0;

option broadcast-address 192.168.1.255;

option domain-name-servers 192.168.1.3;

option domain-name "www.cao.com";¡¡#DNSÃû³Æ#

option domain-name-servers 192.168.1.3;

option time-offset -18000;

range dynamic-bootp 192.168.1.128 192.168.1.255;

default-lease-time 21600;

max-lease-time 43200;

host ns {

hardware ethernet 52:54:AB:34:5B:09;#ÔËÐÐDHCPµÄÍøÂç½Ó¿ÚµÄMACµØÖ·#

fixed-address 192.168.1.9;

}

}


¶þ¡¢½¨Á¢¿Í»§×âÔ¼Îļþ

¡¡¡¡ÔËÐÐDHCP·þÎñÆ÷»¹ÐèÒªÒ»¸öÃûΪ dhcpd.leases µÄÎļþ£¬±£³ÖËùÓÐÒѾ­·Ö·¢³öÈ¥µÄ IP µØÖ·¡£ÔÚRedhat Linux ·¢Ðа汾ÖУ¬¸ÃÎļþλÓÚ /var/lib/dhcp/ Ŀ¼ÖС£Èç¹ûÄúͨ¹ý RPM °²×° ISC DHCP£¬ÄÇô¸ÃĿ¼Ӧ¸ÃÒѾ­´æÔÚ¡£dhcpd.leasesµÄÎļþ¸ñʽΪ£º

Leases address £ûstatement£ý


¡¡¡¡Ò»¸öµäÐ͵ÄÎļþÄÚÈÝÈçÏ£º

lease 192.168.1.255 { #DHCP·þÎñÆ÷·ÖÅäµÄIPµØÖ·#

starts 1 2005/05/02 03:02:26; # lease ¿ªÊ¼×âԼʱ¼ä#

ends 1 2005/05/02 09:02:26; # lease ½áÊø×âԼʱ¼ä#

binding state active;

next binding state free;

hardware ethernet 00:00:e8:a0:25:86; #¿Í»§»úÍø¿¨MACµØÖ·#

uid "%content%01%content%00%content%00\350\240%\206"; #ÓÃÀ´ÑéÖ¤¿Í»§»úµÄUID±êʾ#

client-hostname "cjh1"; #¿Í»§»úÃû³Æ#

}


¡¡¡¡×¢Òâlease ¿ªÊ¼×âԼʱ¼äºÍlease ½áÊø×âԼʱ¼äÊǸñÁÖÍþÖαê׼ʱ¼ä£¨GMT£©£¬²»ÊDZ¾µØʱ¼ä¡£

¡¡¡¡µÚÒ»´ÎÔËÐÐDHCP·þÎñÆ÷ʱdhcpd.leasesÊÇÒ»¸ö¿ÕÎļþ£¬Ò²²»ÓÃÊÖ¹¤½¨Á¢¡£Èç¹û²»ÊÇͨ¹ý RPM °²×° ISC DHCP£¬»òÕß dhcpd ÒѾ­°²×°£¬ÄÇôÄúÓ¦¸ÃÊÔ×ÅÈ·¶¨ dhcpd ½«Æä lease Îļþдµ½ºÎ´¦£¬²¢È·±£¸ÃÎļþ´æÔÚ¡£Ò²¿ÉÒÔÊÖ¹¤½¨Á¢Ò»¸ö¿ÕÎļþ£º

#touch /var/lib/dhcp/dhcpd.leases


Èý¡¢Æô¶¯ºÍ¼ì²éDHCP·þÎñÆ÷
¡¡¡¡Ê¹ÓÃÃüÁîÆô¶¯DHCP·þÎñÆ÷£º

#service dhcpd start


¡¡¡¡Ê¹ÓÃpsÃüÁî¼ì²édhcpd½ø³Ì£º

#ps -ef | grep dhcpd
root 2402 1 0 14:25 ? 00:00:00 /usr/sbin/dhcpd
root 2764 2725 0 14:29 pts/2 00:00:00 grep dhcpd


¡¡¡¡Ê¹Óüì²édhcpdÔËÐеĶ˿ڣº

# netstat -nutap | grep dhcpd
udp 0 0 0.0.0.0:67 0.0.0.0:* 2402/dhcpd


ËÄ¡¢ÅäÖÃDHCP¿Í»§¶Ë

¡¡¡¡Í¨³£Íø¹ÜԱʹÓÃÑ¡ÔñÊÖ¹¤ÅäÖà DHCP ¿Í»§£¬ÐèÒªÐÞ¸Ä /etc/sysconfig/network ÎļþÀ´ÆôÓÃÁªÍø£»²¢ÐÞ¸Ä /etc/sysconfig/network-scripts Ŀ¼ÖÐÿ¸öÍøÂçÉ豸µÄÅäÖÃÎļþ¡£ÔÚ¸ÃĿ¼ÖУ¬Ã¿¸öÉ豸¶¼ÓÐÒ»¸ö½Ð×ö ifcfg-eth£¿ µÄÅäÖÃÎļþ£¬eth£¿ÊÇÍøÂçÉ豸µÄÃû³Æ¡£ Èçeth0µÈ¡£Èç¹ûÄãÏëÔÚÒýµ¼Ê±Æô¶¯ÁªÍø£¬NETWORKING ±äÁ¿±ØÐë ±»ÉèΪ yes¡£ ³ýÁË´Ë´¦Ö®Íâ/etc/sysconfig/network ÎļþÓ¦¸Ã°üº¬ÒÔÏÂÐУº

NETWORKING=yes
DEVICE=eth0
BOOTPROTO=dhcp
ONBOOT=yes


Îå¡¢DHCPÅäÖó£¼û´íÎóÅųý


¡¡¡¡Í¨³£ÅäÖÃDHCP ·þÎñÆ÷ºÜÈÝÒ×£¬²»¹ý£¬ÔÚÕâÀïÓÐһЩ¼¼ÇÉ¿ÉÒÔ°ïÖúÄú±ÜÃâ³öÏÖÎÊÌâ¡£¶Ô·þÎñÆ÷¶øÑÔ£¬ÒªÈ·±£Íø¿¨Õý³£¹¤×÷£¬²¢¾ß±¸¹ã²¥¹¦ÄÜ¡£¶Ô¿Í»§»ú¶øÑÔ£¬»¹ÒªÈ·±£¿Í»§»úµÄÍø¿¨Õý³£¹¤×÷¡£×îºó£¬Òª¿¼ÂÇÍøÂçµÄÍØÆË£¬²¢¿¼ÂÇ¿Í»§»úÏò DHCP ·þÎñÆ÷·¢³öµÄ¹ã²¥ÏûÏ¢ÊÇ·ñ»áÊܵ½×è°­¡£ÁíÍâÈç¹ûdhcpd½ø³ÌûÓÐÆô¶¯£¬ÄÇô¿ÉÒÔä¯ÀÀ syslog ÏûÏ¢ÎļþÀ´È·¶¨ÊÇÄÄÀï³öÁËÎÊÌâ¡£Õâ¸öÏûÏ¢Îļþͨ³£ÊÇ /var/log/messages¡£

¡¡¡¡µäÐ͹ÊÕÏ£º

¡¡¡¡1.DHCP·þÎñÆ÷ÅäÖÃÍê³É£¬Ã»ÓÐÓï·¨´íÎó¡£µ«ÊÇÍøÂçÖеĿͻ§»úȴû°ì·¨È¡µÃIPµØÖ·¡£

¡¡¡¡Í¨³£ÊÇLinux DHCP·þÎñÆ÷›]Óа취½ÓÊÕ?í×Ô255.255.255.255 µÄ DHCP ¿Í»§»úµÄRequest ·â°üÔì³ÉµÄ¡£Ò»°ãÊÇLinux DHCP·þÎñÆ÷µÄÍø¿¨Ã»ÓÐÉèÖþßÓÐMULTICAST¹¦ÄÜ¡£ÎªÁËÈÃdhcpd(dhcp³ÌÐòµÄÊØ»¤½ø³Ì)Äܹ»Õý³£µÄºÍDHCP¿Í»§»ú¹µÍ¨£¬dhcpd±ØÐë´«ËÍ·â°üµ½255.255.255.255Õâ¸öIPµØÖ·£¬µ«ÊÇÓÐЩLinuxϵͳÀï255.255.255.255Õâ¸öIPµØÖ·±»ÓÃÀ´×öΪ¼àÌýÇøÓò×ÓÍøÓò£¨local subnet£©¹ã²¥µÄ IPµØÖ·£¬ËùÒÔÐèÒªÔÚ·ÓÉ±í£¨routing table£©Àï¼ÓÈë255.255.255.255ÒÔ¼¤»îMULTICAST¹¦ÄÜ£»

¡¡¡¡Ê¹ÓÃÃüÁ

route add -host 255.255.255.255 dev eth0


¡¡¡¡Èç¹û±¨¸æ´íÎóÏûÏ¢£º255.255.255.255£ºUnkown host

¡¡¡¡ÄÇôÇëÏÈÐÞ¸Ä/etc/hosts¼ÓÈëÒ»ÐУº

¡¡¡¡255.255.255.255 dhcp

¡¡¡¡2. DHCP¿Í»§¶Ë³ÌÐòºÍDHCP·þÎñÆ÷²»¼æÈÝ

¡¡¡¡ÓÉÓÚLinuxÓÐÐí¶à·¢ÏÖ°æ±¾£¬²»Í¬°æ±¾Ê¹ÓÃDHCP¿Í»§¶Ë³ÌÐòºÍDHCP·þÎñÆ÷Ò²²»Ïàͬ¡£LinuxÌṩÁËËÄÖÖDHCP¿Í»§¶Ë³ÌÐò£ºpump, dhclient, dhcpxd, ºÍdhcpcd¡£Á˽ⲻͬLinux·¢Ðа汾µÄ·þÎñÆ÷¶ËºÍ¿Í»§¶Ë³ÌÐò¶ÔÓÚ³£¼û´íÎóÅųýÊDZØÒªµÄ¡£±ÊÕßÔø¾­Óöµ½¹ýʹÓÃSuSE Linux 9.1 DHCP·þÎñÆ÷ºÍʹÓÃMandrake Linux 9.0¿Í»§»ú²»¼æÈݵÄÇé¿ö¡£´Ëʱ¾Í±ØÐë¸ü»»¿Í»§¶Ë³ÌÐò¡£·½·¨ÊÇÏÈÍ£Ö¹¿Í»§»úµÄÍøÂç·þÎñ£¬Ð¶ÔØÔ­³ÌÐò£¬°²×°ºÍ·þÎñÆ÷¶Ë¼æÈݳÌÐò¡£¸½±í£ºÖ÷ÒªLinux·¢ÐаæʹÓõÄDHCP¿Í»§¶Ë¡£

·¢Ðа汾 ȱʡ DHCP¿Í»§¶Ë ¿ÉÑ¡ DHCP ¿Í»§¶Ë DHCP¿Í»§¶ËÆô¶¯½Å±¾ ¸½¼ÓÅäÖÃÎļþ
Red Hat Linux 9.0 dhclient ÎÞ /sbin/ifup /etc/sysconfig/network

/etc/sysconfig/network-scripts/ifcfg-eth0

Debian Linux 3.0 dhclient ÎÞ /sbin/ifup /etc/network/interfaces

/etc/dhclient.conf

Mandrake Linux 9.1 dhclient dhcpcd, dhcpxd, pump /sbin/ifup /etc/sysconfig/network

/etc/sysconfig/network-scripts/ifcfg-eth0

/etc/dhclient-eth0.conf

SuSE Linux 9.1 dhcpcd dhclient /sbin/ifup-dhcp /etc/sysconfig/network/dhcp

/etc/sysconfig/network/ifcfg-eth0



Áù¡¢DHCP·þÎñÆ÷µÄ°²È«


¡¡¡¡1. ÔÚÖ¸¶¨ÍøÂç½Ó¿ÚÆô¶¯DHCP·þÎñÆ÷

¡¡¡¡Èç¹ûÄãµÄLinuxϵͳÁ¬½ÓÁ˲»Ö¹Ò»¸öÍøÂç½çÃ棬µ«ÊÇÄãÖ»ÏëÈà DHCP ·þÎñÆ÷Æô¶¯ÆäÖÐÖ®Ò»£¬Äã¿ÉÒÔÅäÖà DHCP ·þÎñÆ÷Ö»ÔÚÄǸöÉ豸ÉÏÆô¶¯¡£ÔÚ /etc/sysconfig/dhcpd ÖУ¬°Ñ½çÃæµÄÃû³ÆÌí¼Óµ½ DHCPDARGS µÄÁбíÖУº

DHCPDARGS=eth0


¡¡¡¡»òÕßÖ±½ÓʹÓÃÃüÁ

Echo "DHCPDARGS=eth0" >> /etc/ sysconfig/dhcpd


¡¡¡¡ÕâÑù¶ÔÓÚ´øÓÐÁ½¸öÍø¿¨µÄ·À»ðǽ»úÆ÷£¬¸ü¼Ó°²È«£ºÒ»¸öÍø¿¨¿ÉÒÔ±»ÅäÖÃ³É DHCP ¿Í»§À´´Ó»¥ÁªÍøÉϼìË÷ IP µØÖ·£»ÁíÒ»¸öÍø¿¨¿ÉÒÔ±»ÓÃ×÷·À»ðǽ֮ºóµÄÄÚ²¿ÍøÂçµÄ DHCP ·þÎñÆ÷¡£½öÖ¸¶¨Á¬½Óµ½ÄÚ²¿ÍøÂçµÄÍø¿¨Ê¹ÏµÍ³¸ü¼Ó°²È«£¬ÒòΪÓû§ÎÞ·¨Í¨¹ý»¥ÁªÍøÀ´Á¬½ÓËüµÄÊØ»¤½ø³Ì¡£

¡¡¡¡2. ÈÃDHCP·þÎñÆ÷ÔÚ¼àÀÎÖÐÔËÐÐ

¡¡¡¡Ëùν"¼àÀÎ"¾ÍÊÇָͨ¹ýchroot»úÖÆÀ´¸ü¸Äij¸öÈí¼þÔËÐÐʱËùÄÜ¿´µ½µÄ¸ùĿ¼£¬¼´½«Ä³Èí¼þÔËÐÐÏÞÖÆÔÚÖ¸¶¨Ä¿Â¼ÖУ¬±£Ö¤¸ÃÈí¼þÖ»ÄܶԸÃĿ¼¼°Æä×ÓĿ¼µÄÎļþÓÐËù¶¯×÷£¬´Ó¶ø±£Ö¤Õû¸ö·þÎñÆ÷µÄ°²È«¡£ÕâÑù¼´Ê¹³öÏÖ±»ÆÆ»µ»ò±»ÇÖÈ룬ËùÊܵÄËðʧҲ½ÏС¡£

¡¡¡¡½«Èí¼þchroot»¯µÄÒ»¸öÎÊÌâÊǸÃÈí¼þÔËÐÐʱÐèÒªµÄËùÓгÌÐò¡¢ÅäÖÃÎļþºÍ¿âÎļþ¶¼±ØÐëÊÂÏÈ°²×°µ½chrootĿ¼ÖУ¬Í¨³£³ÆÕâ¸öĿ¼Ϊchroot jail£¨chroot"¼àÀÎ"£©¡£Èç¹ûÒªÔÚ"¼àÀÎ"ÖÐÔËÐÐdhcpd£¬¶øÊÂʵÉϸù±¾¿´²»µ½ÎļþϵͳÖÐÄǸöÕæÕýµÄĿ¼¡£Òò´ËÐèÒªÊÂÏÈ´´½¨Ä¿Â¼£¬²¢½«dhcpd¸´ÖƵ½ÆäÖС£Í¬Ê±dhcpdÐèÒª¼¸¸ö¿âÎļþ£¬¿ÉÒÔʹÓÃldd£¨library Dependency DisplayËõд£©ÃüÁldd×÷ÓÃÊÇÏÔʾһ¸ö¿ÉÖ´ÐгÌÐò±ØÐëʹÓõĹ²Ïí¿â¡£

ldd dhcpd

libc.so.6 => /lib/tls/libc.so.6 (0x42000000)

/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)



¡¡¡¡ÕâÒâζ×Å»¹ÐèÒªÔÚ"¼àÀÎ"Öд´½¨libĿ¼£¬²¢½«¿âÎļþ¸´ÖƵ½ÆäÖС£ÊÖ¹¤Íê³ÉÕâÒ»¹¤×÷ÊǷdz£Âé·³µÄ£¬´Ëʱ¿ÉÒÔÓÃjailÈí¼þ°üÀ´°ïÖú¼ò»¯chroot"¼àÀÎ"½¨Á¢µÄ¹ý³Ì¡£

¡¡¡¡(1)JailÈí¼þµÄ±àÒëºÍ°²×°

¡¡¡¡Jail¹Ù·½ÍøÕ¾ÊÇ£ºhttp://www.jmcresearch.com/ £¬×îа汾£º1.9a¡£

#Wget http://www.jmcresearch.com/static/dwn/projects/jail/jail_1.9a.tar.gz
#tar xzvf jail.tar.gz; cd jail/src
#make; make install


¡¡¡¡(2)ÓÃjail´´½¨¼àÀÎ

¡¡¡¡jailÈí¼þ°üÌṩÁ˼¸¸öPerl½Å±¾×÷ΪÆäºËÐÄÃüÁ°üÀ¨mkjailenv¡¢addjailuserºÍaddjailsw¡£

¡¡¡¡mkjailenv£º´´½¨chroot"¼àÀÎ"Ŀ¼£¬²¢ÇÒ´ÓÕæʵÎļþϵͳÖп½±´»ù±¾µÄÈí¼þ»·¾³¡£addjailsw£º´ÓÕæʵÎļþϵͳÖп½±´¶þ½øÖÆ¿ÉÖ´ÐÐÎļþ¼°ÆäÏà¹ØµÄÆäËüÎļþ£¨°üÀ¨¿âÎļþ¡¢¸¨ÖúÐÔÎļþºÍÉ豸Îļþ£©µ½¸Ã"¼àÀÎ"ÖС£addjailuser£º´´½¨ÐµÄchroot"¼àÀÎ"Óû§¡£

¡¡¡¡Ê×ÏÈֹͣĿǰdhcpd·þÎñ£¬È»ºó½¨Á¢chrootĿ¼£º

#/sbin/service dhcpd start
#mkjailenv /chroot/
mkjailenv

A component of Jail (version 1.9 for linux)

http://www.gsyc.inf.uc3m.es/~assman/jail/

Juan M. Casillas

Making chrooted environment into /chroot

Doing preinstall()

Doing special_devices()

Doing gen_template_password()

Doing postinstall()

Done.


¡¡¡¡ÏÂÃæµÄÀý×ÓչʾΪ"¼àÀÎ"Ìí¼Ódhcpd³ÌÐòµÄ¹ý³Ì£º

# addjailsw /chroot/ -P /usr/sbin/dhcpd
addjailsw

A component of Jail (version 1.9 for linux)

http://www.gsyc.inf.uc3m.es/~assman/jail/

Juan M. Casillas

Guessing dhcpd args(0)

Warning: file /chroot//lib/tls/libc.so.6 exists. Overwritting it

Warning: file /chroot//lib/ld-linux.so.2 exists. Overwritting it

¡­¡­¡­
Done.


¡¡¡¡²»ÓÃÔÚÒâÄÇЩ¾¯¸æÐÅÏ¢£¬ÒòΪjail»áµ÷ÓÃldd¼ì²édhcpdÓõ½µÄ¿âÎļþ¡£¶ø¼¸ºõËùÓлùÓÚ¹²Ïí¿âµÄ¶þ½øÖÆ¿ÉÖ´ÐÐÎļþ¶¼ÐèÒªÉÏÊöµÄ¼¸¸ö¿âÎļþ¡£½ÓÏÂÀ´½«dhcpdµÄÏà¹ØÎļþ¿½±´µ½"¼àÀÎ"ÖУº

# mkdir -p /chroot/dhcp/etc
# cp /etc/dhcpd.conf /chroot/dhcp/etc/
# mkdir -p /chroot/dhcp/var/state/dhcp
# touch /chroot/dhcp/var/state/dhcp/dhcp.leases


¡¡¡¡ÖØÐÂÆô¶¯dhcpd£º

[root@www root]# /chroot/usr/sbin/dhcpd


¡¡¡¡Ê¹ÓÃpsÃüÁî¼ì²édhcpd½ø³Ì£º

#ps -ef | grep dhcpd
root 2402 1 0 14:25 ? 00:00:00 /chroot/usr/sbin/dhcpd
root 2764 2725 0 14:29 pts/2 00:00:00 grep dhcpd


¡¡¡¡×¢Òâ´Ëʱ½ø³ÌÃû³ÆÒѾ­¸Ä±ä£¬Ê¹Óüì²édhcpdÔËÐеĶ˿ڣº

# netstat -nutap | grep dhcpd
udp 0 0 0.0.0.0:67 0.0.0.0:* 2402/dhcpd


¡¡¡¡¶Ë¿ÚºÅûÓиı䡣ÏÖÔÚdhcpdÒѾ­³É¹¦ÔËÐÐÔÚ"¼àÀÎ"ÖС£µ½´ËΪֹһ¸öÕâÑù£¬Ò»¸öÍêÕûºÍ°²È«µÄ DHCP·þÎñÆ÷¾ÍÍê³ÉÁË¡£

]]> 2007-12-02T23:18:05 +0800 http://www.DoMsN.net/exurl.php/reply/643.html 2007-11-11T21:39:40 +0800 http://www.DoMsN.net/exurl.php/reply/642.html ÔÚ½éÉÜÈçºÎʹÓÃvi֮ǰ£¬Á˽âvi¾ßÓÐÁ½ÖÖ»ù±¾Ä£Ê½ÊǺÜÖØÒª¡£ÕâÁ½ÖÖ»ù±¾Ä£Ê½ÎªÊäÈëģʽºÍÖ¸Áîģʽ¡£ÊäÈëģʽΪÊäÈëÃüÁÎı¾¾Í»áÏÔʾÔÚÆÁÄ»ÉÏ£»¶øÖ¸Áî ģʽΪÊäÈëÃüÁî¾ÍÖ´ÐÐÃüÁ¶ø²»»áÏÔʾÎÄ×Ö¡£Àí½âÖ¸Áîģʽ×î¼òµ¥·½Ê½¾ÍÊÇÏëÏóƽʱ¼ôÇС¢¸´ÖÆÒÔ¼°Õ³ÌùÊý¾ÝʱËù·¢ÉúµÄÇé¿ö¡£¡¡
ÔÚĬÈÏ״̬Ï£¬ viÒÔÖ¸ÁîģʽÏÂÆô¶¯£¬Òò´ËÄãÊäÈëÃüÁîʱ²»»áÏÔʾÎÄ×Ö£¬³ý·ÇÄãÊäÈëÃüÁîÇл»ÖÁÊäÈëģʽ¡£´ó¶àÊýviÃüÁî²»»áÆÁÄ»ÉÏÏÔʾÈκζ«Î÷£¬ÄãÖ»ÐèÒªÖªµÀËüÃǵŤ×÷¹ý ³Ì¾Í×ã¹»ÁË¡£Ê¹ÓÃ[Esc]¼ü¿ÉÒÔÔÚÊäÈëģʽºÍÖ¸Áîģʽ֮¼äÇл»¡£Èç¹ûÄãÒѾ­´¦ÓÚÖ¸ÁîģʽÖУ¬Ê¹ÓÃ[Esc]½«»á¸æËßvi£¬ÄãÒѾ­ÊäÈëÃüÁî²¢½«ÒªÖ´ÐÐÃü Áî¡£Èç¹ûÄãûÓÐÊäÈëÈκÎÃüÁÔÚÖ¸ÁîģʽÖа´ÏÂ[Esc]¼ü½«ÖжϲÙ×÷¡£
ÏÖÔÚÎÒÒѾ­½éÉÜÁËviµÄ»ù±¾²Ù×÷£¬Äã¿ÉÒÔ¶¯ÊÖÊÔÓÃһϡ£Ê×ÏÈ£¬ÔÚÄãµÄ¹¤×÷Õ¾´ò¿ªÒ»¸öÖն˴°¿Ú£¬ÄãÖ»ÐèÔÚ$ÌáʾÖÐÊäÈëviÈ»ºó°´»Ø³µ¼ü¾Í¿ÉÒÔÆô¶¯vi±à¼­Æ÷¡£¡¡
½Ó×Å£¬Ä㽫¿´µ½µ¯³öÒ»¸öÒ³Ãæ×óϽÇÓÐÒ»¸ö~·ûºÅµÄ¿Õ°×Îļþ¡£ÕâÒ»·ûºÅ²»ÈÝÒ׿´µ½£¬µ«ÊÇÄã¿´µ½µÄÕâЩ~·ûºÅÕýÊDZíʾ´¦ÓÚÎļþµÄµ×²¿¡£µ±¶ÔÎļþ±£´æÖ®ºó£¬Õâ Щ·ûºÅ¾Í²»»áÏÔʾ³öÀ´¡£¡¡¡¡¡¡¡¡ÈôÒª±à¼­Ä³¸öÎļþ»òÕßΪһ¿Õ°×ÎļþÃüÃû£¬Äã¿ÉÊäÈëvi filename¡£vi filename¿ÉÒÔÊÇÒ»¸öÒѾ­´æÔÚµÄÎļþÃû»òÕßÊÇÒ»¸ö¸øÐÂÎļþÖ¸¶¨µÄÃû³Æ¡£¡¡

ͨÓÃÊäÈëģʽ¡¡¡¡
¡¡ Ò»µ©½øÈë±à¼­Îĵµ£¬³ýÁËʹÓÃ[Esc]Çл»·½·¨£¬»¹ÓÐÆäËüºÜ¶à·½·¨Ê¹vi½øÈëµ½ÊäÈëģʽ¡£ºÜ¶àÆäËüµÄ·½·¨¶¼°üº¬Ê¹ÓÃÒ»¸öviÖ¸Áî¡£ÕâЩָÁî¿ÉÒÔÁ¢¼´ÈÃvi½øÈëÊäÈëģʽ£¬ÓÉ´ËÊäÈëµÄ×Ö·ûÁ¢¼´ÒÔÎÄ×Ö³öÏÖÔÚÎĵµÖС£³£ÓõÄÖ¸ÁîΪ£º¡¡¡¡
i ¡¡¡¡¡¡¡¡ÕâÊÇÒ»¸öÊäÈëÃüÁ¼´´Ó¹â±êËùÔÚλÖÃÇ°Ã濪ʼ²åÈëÎÄ×Ö£¬¹â±êºóµÄÎÄ×ÖËæÐÂÔöÎÄ×ÖÏòÏòÒƶ¯¡£ Èç¹ûÊÇÒ»¸ö¿Õ°×Îĵµ£¬ÎÄ×Ö½«»áÊäÈëÔÚÎĵµµÄ×óÉϽǡ£¡¡

I ¡¡¡¡¡¡¡¡ÔÚÐÐÃüÁʼ´¦µÄÊäÈëģʽ£¬¼´ÔÚµ±Ç°ÐеĿªÊ¼´¦ÊäÈëÎÄ×Ö¡£ÓëWordÖеݴϼüºóÊäÈëÎÄ×ÖÀàËÆ¡£¡¡

¡¡a ¡¡¡¡¡¡¡¡ÕâÊÇÒ»¸öÐÂÔöÃüÁ¼´´Ó¹â±êËùÔÚλÖúóÃ濪ʼÐÂÔöÎÄ×Ö£¬¹â±êºóµÄ×ÊÁÏËæÐÂÔöÎÄ×ÖÏòºóÒƶ¯¡£¡¡¡¡

A ÕâÊÇÒ»¸öÐÂÔöµ½ÐÐÃüÁîµÄ²Ù×÷£¬¼´´Ó¹â±êËùÔÚÐÐ×îºóÃæµÄµØ·½¿ªÊ¼ÐÂÔöÎÄ×Ö¡£ÕâÓëWordÖеݴϼüºóÊäÈëÎÄ×ÖÀàËÆ¡£¡¡

o ¡¡¡¡¡¡¡¡ÕâÊÇÒ»¸öÃüÁî֮ϵĴò¿ªÐÐÃüÁ¼´ÔÚ¹â±êËùÔÚÐÐÏÂÃæÐÂÔöÒ»Ðв¢½øÈëÊäÈëģʽ¡£

¡¡O ¡¡¡¡¡¡¡¡ÕâÊÇÒ»¸öÃüÁîÖ®ÉϵĴò¿ªÃüÁ¼´ÔÚ¹â±êËùÔÚÐÐÉÏ·½ÐÂÔöÒ»Ðв¢½øÈëÊäÈëģʽ¡£¡¡

±à¼­Ö®ºóʹÓÃÒÔÉÏÈÎÒ»ÃüÁ½«»á·µ»Øµ½Ö¸Áîģʽ¡£¡¡¡¡¡¡

¹â±êÒƶ¯Ö¸Áî¡¡¡¡¡¡

¡¡½ÓÏÂÀ´ÐèҪѧϰµÄÊÇviÖеÄä¯ÀÀÃüÁî¡£ÒÔÖ¸ÁîģʽÔÚÎĵµÖÐÒƶ¯£¬¿ÉÒÔʹÓÃÒÔϵÄÃüÁ¡¡
h£º½«Ò»¸öÎÄ×ÖÒƶ¯µ½×ó±ß¡¡¡¡¡¡
j:ÍùÏÂÒƶ¯Ò»¸öÎÄ×Ö¡¡¡¡¡¡
k: ÍùÉÏÒƶ¯Ò»¸öÎÄ×Ö¡¡¡¡¡¡
l: ½«Ò»¸öÎÄ×ÖÒƶ¯µ½Óұߡ¡¡¡¡¡
ÔÚÊó±êÓëGUIµÄ»·¾³ÖУ¬ÕâЩÒƶ¯ÃüÁî¿´ËÆÓÐЩ¹ýʱ£¬µ«ÊÇËüÃǶ¼±»°üº¬ÓÚËùÓÐvi°æ±¾¾Í¹ã·ºÓ¦Ó᣺ܶàʱºò£¬¹â±êºÅ£¬ÉϹâ±ê£¬Ï¹â±ê£¬×ó¹â±ê£¬ÓÒ¹â±ê¶¼»áÆðµ½×÷Ó㬵«ÊDzÙ×÷ÕßÓ¦¸Ã½«termcapÓëterminfoÊôÐÔ°üº¬ÔÚÕâЩÃüÁîÖ®ÖС£¡¡¡¡¡¡

ÒÔϵÄÆäËüÒƶ¯Ö¸ÁîÒ²¿É´óÓаïÖú£º¡¡¡¡
[Ctrl]f ¡¡¡¡¡¡¡¡ÏòÏÂÒƶ¯Ò»Ò³Ö¸Áî¡£Õ⽫ʹµÃ¹â±êÔÚÎı¾ÖÐÏòÏÂÒƶ¯Ò»Ò³¡£¡¡¡¡
[Ctrl]b ¡¡¡¡¡¡¡¡ÏòºóÒƶ¯Ò»Ò³Ö¸Áî¡£Õ⽫ʹµÃ¹â±êÔÚÎı¾ÖÐÏòºóÒƶ¯Ò»Ò³¡£¡¡¡¡¡¡
¡¡ [Ctrl]u ¡¡¡¡¡¡¡¡ÏòÏÂÒƶ¯°ëÒ³Ö¸Áî¡£Õ⽫ʹµÃ¹â±êÔÚÎı¾ÖÐÏòÏÂÒƶ¯°ëÒ³¡£¡¡¡¡¡¡
¡¡ ^ ¡¡¡¡¡¡¡¡ÐÐÃüÁʼ´¦¡£¹â±ê½«»áÒƶ¯µ½ÐеĿªÊ¼´¦¡£¡¡¡¡¡¡
¡¡ $ ¡¡¡¡¡¡¡¡ÐÐÃüÁî½áÊø´¦¡£¹â±ê½«»áÒƶ¯µ½ÐеĽáÊø´¦¡£¡¡¡¡¡¡
¡¡ w ¡¡¡¡¡¡¡¡Òƶ¯µ½ÉÏÒ»¸öÎÄ×ֵĿªÊ¼¡£¡¡¡¡
b ¡¡¡¡¡¡¡¡Òƶ¯µ½ÏÂÒ»¸öÎÄ×ֵĿªÊ¼¡£¡¡¡¡
e ¡¡¡¡¡¡¡¡ÎÄ×ÖÄ©¶ËÖ¸Áî¡£¡¡¡¡
G ¡¡¡¡¡¡¡¡Òƶ¯µ½ÎļþµÄÄ©¶Ë¡£¡¡

³£¹æ¹¦ÄÜ¡¡¡¡
ÔÚÒ»°ãµÄÎı¾±à¼­Æ÷ÖУ¬ËùÓеŦÄÜ£¬±ÈÈçɾ³ý£¬¸ü¸Ä£¬¼ôÇУ¬¸´ÖÆ£¬Õ³Ìù£¬ÒÔ¼°ËÑË÷/Ìæ´úµÈ£¬¶¼¿ÉÒÔÔÚviÖÐÕÒµ½¡£ºÜ¶àÖ¸Á¿ÉÒÔ½«±à¼­×´Ì¬½øÈëÊäÈëģʽ£¬¶øÓÖ¿ÉÒÔʹÓÃ[Esc]À´ÖÕÖ¹¡£³£¹æʹÓõı༭ָÁî°üÀ¨: ¡¡¡¡
x£ºÉ¾³ý×Ö·ûÃüÁ¼´É¾³ý¹â±êËùÔÚ×Ö·û¡£¡¡¡¡
dw£ºÉ¾³ýÎÄ×ÖÃüÁ¼´É¾³ý¹â±ê´¦µÄÎÄ×Ö¡£¡¡¡¡
dd£ºÉ¾³ýÐÐÃüÁ¼´É¾³ý¹â±êËùÔÚµÄÐС£¡¡¡¡
D£ºÉ¾³ýµ½ÐÐÄ©¶Ë£¬¼´É¾³ý´Ó¹â±êËùÔÚλÖõ½ÐÐÄ©¶ËµÄËùÓÐÎı¾¡£¡¡¡¡
cw£º¸Ä±äÎÄ×ÖÃüÁ¼´¹â±êËùÓÐλÖõÄÎÄ×Ö½«Ëæ×ÅÊäÈëÎÄ×Ö¶ø¸Ä±ä£¬ÖÁµ½°´ÏÂ[Esc]¡£¡¡¡¡
r£ºÌæ´ú×Ö·ûÃüÁ¼´¹â±êËùÔÚλÖõÄ×Ö·û½«±»ÊäÈëµÄ×Ö·ûÌæ´ú£¬ÖÁµ½°´ÏÂ[Esc]¡£¡¡¡¡
R£ºÌæ´ú¶àÐÐ×Ö·ûÃüÁ¼´¹â±êËùÔÚλÖõ½ÓÒ±ßËùÓеÄ×Ö·û½«±»ÊäÈëµÄ×Ö·ûÌæ´ú£¬ÖÁµ½°´ÏÂ[Esc]¡£¡¡¡¡¡¡¡¡
¾ø´ó¶àÊýÕâЩָÁ¿ÉÒÔͨ¹ý×éºÏ¶øÌá¸ßÆ书ÄÜ¡£
ÀýÈ磬Èç¹ûÄãÊäÈë2dd£¬vi½«É¾³ýÁ½ÐÐÎı¾¡£¡¡¡¡¡¡

¡¡¼ôÇÐÓëÕ³ÌùµÈ²Ù×÷¡¡¡¡¡¡
¡¡ÓëÆäËüºÜ¶à±à¼­Æ÷Ò»Ñù£¬Äã¿ÉÒÔÔÚÎĵµÖÐʹÓüôÇÐÓëÕ³ÌùÎı¾¡£ÒÔÏÂÃüÁîÊÇ¿ÉÒÔʹÓõÄ×îΪ¼òµ¥µÄ¼ôÇÐÓëÕ³Ìù²Ù×÷¡£¡¡¡¡
yy ¡¡¡¡¡¡¡¡¸´ÖÆÐÐÃüÁî¡£¹â±êËùÓÐÐеÄÎı¾½«±»¸´ÖƵ½ÀàËƼôÇаåµÄ»º³åÆ÷¡£×¢Òâµ½¿ÉÒÔʹÓöà¸ö¸´ÖÆÃüÁî¸ü¸ÄÕâÒ»ÃüÁîÒÔ½«¶àÐÐÎÄ×Ö¼ôÇе½»º³åÆ÷¡£¡¡¡¡
yl ¡¡¡¡¡¡¡¡¸´ÖÆ×Ö·ûÃüÁî¡£¹â±êËùÓÐÐеÄ×Ö·û½«±»¸´ÖƵ½ÀàËƼôÇаåµÄ»º³åÆ÷¡£¿ÉÒÔʹÓöà¸ö¸´ÖÆÃüÁî¸ü¸ÄÕâÒ»ÃüÁîÒÔ½«¶àÐÐ×Ö·û¼ôÇе½»º³åÆ÷¡£¡¡¡¡
p ¡¡¡¡¡¡¡¡ ºó·ÅÖÃÃüÁî¡£ÔÚµ±Ç°¹â±êλÖÃÖ®ºó·ÅÖûòÕ³Ìù»º³åÆ÷µÄÄÚÈÝ¡£¶ÔÓÚ¸´ÖÆÐÐÃüÁ»º³åÆ÷µÄÄÚÈݽ«±»Õ³ÌùÔÚµ±Ç°ÐÐÖ®ºó¡£¶ÔÓÚ¸´ÖÆ×Ö·ûÐÐÃüÁ»º³åÆ÷ÄÚÈݽ«±»Õ³ÌùÔÚ¹â±êµÄÓұߡ£¡¡¡¡
P ¡¡¡¡¡¡¡¡ Ç°·ÅÖÃÃüÁî¡£ÔÚµ±Ç°¹â±êλÖÃ֮ǰ·ÅÖûòÕ³Ìù»º³åÆ÷µÄÄÚÈÝ¡£¶ÔÓÚ¸´ÖÆÐÐÃüÁ»º³åÆ÷µÄÄÚÈݽ«±»Õ³ÌùÔÚµ±Ç°ÐÐ֮ǰ¡£¶ÔÓÚ¸´ÖÆ×Ö·ûÐÐÃüÁ»º³åÆ÷ÄÚÈݽ«±»Õ³ÌùÔÚ¹â±êµÄ×ó±ß¡£¡¡¡¡
ʹÓø´ÖƺͷÅÖÃÖ¸Áîʱ£¬ÄãÒ²¿ÉÒÔ×Ö·ûÖ¸Áî¶øʹÓöà¸ö»º³åÆ÷»ò¼ôÇа塣ÕâЩ×Ö·û¿ÉΪa-z£¬²¢ÇÒÖ»ÄÜÊÇСд×Öĸ¡£ÀýÈ磬ayy½«µ±Ç°ÐÐÄÚÈݸ´ÖƵ½»º³åÆ÷A£¬apÃüÁ»º³åÆ÷µÄÄÚÈÝÕ³ÌùÔÚµ±Ç°ÐÐ֮ǰ¡£¡¡

ViÖÐ×îΪÖØÒªµÄÃüÁîÒªËãundoÖ¸Áî¡£ÕâÒ»ÃüÁîÊ®·Ö¼òµ¥£ºÖ»ÐèÒª°´ÏÂu¡£°´ÏÂu¼ü¾Í¿ÉÒÔ³·Ïû×î½üʹÓõÄÒ»´ÎÖ¸Áî¡£¡¡¡¡¡¡¡¡ÓëundoÃüÁîÀàËƵÄÊÇ redoÃüÁî¡£°´Ï¾äºÅ¼ü(.)½«»áÖØмüÈë×î½üµÄÖ¸Áî¡£ÀýÈ磬Èç¹ûÄãʹÓÃcwÀ´¸Ä±äÒ»¸öÎÄ×Ö£¬Äã¿ÉÒÔ²éÕÒÕâÒ»ÎÄ×ÖÈ»ºóʹÓþäºÅ.À´ÕâÒ»ÎÄ×Ö¡£¡¡¡¡
ÆäËüÁ½¸öÖØÒªµÄÃüÁîΪsearchÃüÁΪÁËÔÚÎĵµÖÐÏòÇ°²éÕÒ£¬¿É¼üÈë/text£¬text¼´ÎªÄã²éÕÒµÄÄÚÈÝ¡£ÖØÒªµÄÊÇÒ»¶¨×¢Ò⣬ֻÓÐÊäÈëÄÚÈÝÍêÈ«µÄÆ¥Å䣬Äã²Å¿ÉÒÔ²éÕÒµ½¡£Vi²»Ö§³Ö»ìºÏ²éѯ»òÕßÄ£ºý²éѯ¡£¶ÔÓÚÏòºó²éÕÒ£¬¿É¼üÈë?text£¬text¼´Îª²éÕÒµÄÄÚÈÝ¡£

±à¼­Ö¸Áî¡¡¡¡
ÔÚÖ¸ÁîģʽÖУ¬ºÜ¶à×éÃüÁ¿ÉÒÔǰ׺:¡£ÓëÒÔÉÏÌá¼°µÄÃüÁî²»Ò»Ñù£¬Ò»µ©ÊäÈëÒ»¸öðºÅ£¬ËùÓÐÖ¸Á³öÏÖÔÚÆÁÄ»µÄ×óϽǣ¬²¢¿ÉÒÔÔÚÖ´ÐÐ֮ǰ±à¼­¡£ÒÔÏÂÊdz£Óà µÄÖØÒªµÄ:Ö¸Áî¡£¡¡¡¡¡¡¡¡ £ºw ¡¡¡¡¡¡¡¡±àдÎļþÃüÁî¡£Èç¹ûÄãÊäÈë:wÈ»ºó»Ø³µ£¬µ±Ç°Îļþ½«±»Ð´ÈëÓ²ÅÌ¡£Èç¹ûʹÓõÄÊÇÒ»¸ö¿Õ°×Îĵµ£¬½«»á³öÏÖ¡°Ã»Óе±Ç°µÄÎļþÃû¡±µÄÏûÏ¢¡£¿ÉÒÔʹÓÃ:wÎÄ ¼þÃû½«Ò»¸ö¿Õ°×Îĵµ»òµ±Ç°ÎĵµÐ´Èëµ½ÁíÒ»Îļþ¡£¡¡¡¡
:w!»ò:wÎļþÃû¡¡¡¡¡¡¡¡¸²¸ÇÎļþÃüÁî¡£Èç¹ûÊäÈë:w!È»ºó»Ø³µ£¬Îļþ½«»á±»µ±Ç°ÐÂÊäÈëµÄÃû³Æ¶ø¸²¸Ç¡£Õâ¿ÉÓÃÓÚÎļþµÄ¸²¸Ç¡£¡¡¡¡
:q ¡¡¡¡¡¡¡¡Í˳öÃüÁî¡£Èç¹ûÕý³£±£³Ö£¬ÊäÈ룺q½«»áÖÕÖ¹Õû¸ö²Ù×÷¡£¡¡¡¡
:q! ¡¡¡¡¡¡¡¡Í˳ö¶ø²»ÐèÒª±£³ÖÃüÁî¡£ÔÚ²»ÐèÒª±£´æÎļþµÄÇé¿öÏÂÍ˳ö¡£¡¡¡¡
:%s/find_text/replace_text/ ¡¡¡¡

²éѯÓëÌæ´úÃüÁî¡¡¡¡
ÕýÈçÉÏÃæÌá¼°Ò»Ñù£¬¿ÉÒԸıä²éѯÃüÁîΪһ¸ö²éѯÓëÌæ´úÃüÁʹÓÃ:%sÃüÁî¿ÉÒÔ¸æËßvi²éѯÎĵµÖÐËùÓÐÐС£/find_textÃüÁîÓëÒÔÉϵIJéѯÃüÁîÀà ËÆ£¬µ±Æäºó׺/replace_text/,ʱ£¬/find_text²Ù×÷½á¹ûµÄµÚÒ»Ðн«»á±»Ìæ´ú¡£ÎªÁ˽«/find_textËùÓÐÄÚÈݱ»Ìæ´ú£¬¿ÉÒÔÔö¼Ó Ò»¸ög(È«¾Ö)£¬±ÈÈç:%s/find_text/replace_text/g¡£¡¡¡¡
Ä㲻ҪֻʹÓõ¥Ò»µÄÖ¸Áî¡£Äã¿ÉÒÔ½«¶à¸öÖ¸Áî½áºÏʹÓᣠÀýÈ磬:wq!½«»á±£´æÎļþµ½Ó²Å̲¢Í˳övi¶ø·µ»Øµ½Ö¸Áî״̬¡£¡¡¡¡¡¡¡¡Vi=°üº¬È«²¿(Very involved) ¡¡¡¡¡¡¡¡ÒÔÉÏÌá¼°µÄÄÚÈÝÖ»ÊÇvi¹¦ÄܵÄһС²¿·Ö¡£Äã¿ÉÒÔÒ»ÆðÖ´ÐÐÖ¸Áî´®£¬ÒÔ±ê¼Ç·½Ê½¸´ÖƶøÕ³ÌùÎı¾£¬»òÕßʹÓÃsedÖ¸Áî¡£Ä㻹¿ÉÒÔ½«shell scriptµÄÊä³ö»òÆäËüÖ¸Áî²åÈëµ½ÄãµÄÎĵµÖС£¡¡¡¡¡¡¡¡ÒÔÉÏÉæ¼°µ½µÄÀý×ÓºÍÖ¸Á¿ÉÒÔ´øÄã½øÈëviµÄ´óÃÅ¡£ºÜ¶àviʹÓÃÕßÔÚ²Ù×÷ʱ¶¼»á¼ÇסһЩÃüÁî¡£´Ó ÆäËüʹÓÃviµÄÈË¿ÉÒÔѧ»á¸ü¶àµÄviÖ¸Á¶ø´ËʱÄã»òÐí¾ªÌ¾viµÄÇ¿´ó¡£È»¶ø£¬ÄãÓ¦¸Ã¼Çסһµã£º¾­³£µØʹÓÃ:aÖ¸ÁÒòΪviûÓÐÌṩ×Ô¶¯ºǫ́Îĵµ±£´æ¹¦ ÄÜ¡£]]> 2007-11-05T23:16:12 +0800 http://www.DoMsN.net/exurl.php/reply/641.html ÒýÓÃ:ranges/pat1/pat2/g
ÆäÖÐ
: ÕâÊÇViµÄÃüÁîÖ´ÐнçÃæ¡£
range ÊÇÃüÁîÖ´Ðз¶Î§µÄÖ¸¶¨£¬¿ÉÒÔʹÓðٷֺţ¨%£©±íʾËùÓÐÐУ¬Ê¹Óõ㣨.£©±íʾµ±Ç°ÐУ¬Ê¹ÓÃÃÀÔª·ûºÅ£¨$£©±íʾ×îºóÒ»ÐС£Ä㻹¿ÉÒÔʹÓÃÐкţ¬ÀýÈç10,20±í ʾµÚ10µ½20ÐУ¬.,$±íʾµ±Ç°Ðе½×îºóÒ»ÐУ¬.+2,$-5±íʾµ±Ç°ÐкóÁ½ÐÐÖ±µ½È«Îĵĵ¹ÊýµÚÎåÐУ¬µÈµÈ¡£
s ±íʾÆäºóÊÇÒ»¸öÌæ»»ÃüÁî¡£

pat1 ÕâÊÇÒª²éÕÒµÄÒ»¸öÕýÔò±í´ïʽ£¬ÕâƪÎÄÕÂÖÐÓÐÒ»´ó¶ÑÀý×Ó¡£

pat2 ÕâÊÇÏ£Íû°ÑÆ¥Åä´®±ä³ÉµÄģʽµÄÕýÔò±í´ïʽ£¬ÕâƪÎÄÕÂÖÐÓÐÒ»´ó¶ÑÀý×Ó¡£
g ¿ÉÑ¡±êÖ¾£¬´øÕâ¸ö±êÖ¾±íʾÌæ»»½«Õë¶ÔÐÐÖÐÿ¸öÆ¥ÅäµÄ´®½øÐУ¬·ñÔòÔòÖ»Ìæ»»ÐÐÖеÚÒ»¸öÆ¥Åä´®¡£]]> 2007-11-05T22:50:06 +0800 http://www.DoMsN.net/exurl.php/reply/640.html
¡¡¡¡1. ÏÂÔØsquid2.6 http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE1-20060726.tar.gz

¡¡¡¡2. °²×°£º

wwwtest137#tar xzvf squid-2.6.STABLE1-20060726.tar.gzwwwtest137#cd squid-2.6.STABLE1-20060726wwwtest137#configure --prefix=/usr/local/squid --enable-dlmalloc --with-pthreads --enable-poll --disable-internal-dns --enable-stacktrace --enable-removal-policies="heap,lru" --enable-delay-pools --enable-storeio="aufs,coss,diskd,ufs"wwwtest137#make wwwtest137#make install
¡¡¡¡°²×°Íê³ÉÁË¡£
¡¡¡¡ÒòΪÊDzâÊԵģ¬ËùÒÔÏà¹ØµÄ²ÎÊý¿ÉÄܲ¢²»ÊDZȽÏÍêÉƵģ¬µ«ÊÇʹÓÃÊÇûÓÐÎÊÌâµÄ¡£

¡¡¡¡3. ÅäÖãºÒÔÏÂÊDz¿·Ö¹Ø¼üÅäÖã¬ÆäËûÓë2.5µÄÏàͬ

#squid.conf#·þÎñÆ÷IP 192.168.1.1#¼àÌý·þÎñÆ÷µÄ80¶Ë¿Ú£¬Í¸Ã÷´úÀí£¬Ö§³ÖÓòÃûºÍIPµÄÐéÄâÖ÷»úhttp_port 192.168.1.1:80 transparent vhost vport #ÏÞÖÆͬһIP¿Í»§¶ËµÄ×î´óÁ¬½ÓÊýacl OverConnLimit maxconn 16http_access deny OverConnLimit#·ÀÖ¹ÌìÑĵÁÁ´£¬×ª¼Þ¸ø°Ù¶Èacl tianya referer_regex -i tianyahttp_access deny tianyadeny_info http://www.baidu.com/logs.gif tianya #·ÀÖ¹±»ÈËÀûÓÃΪHTTP´úÀí£¬ÉèÖÃÔÊÐí·ÃÎʵÄIPµØÖ·acl myip dst 192.168.1.1 http_access deny !myip #·ÀÖ¹°Ù¶È»úÆ÷ÈËÅÀËÀ·þÎñÆ÷acl AntiBaidu req_header User-Agent Baiduspiderhttp_access deny AntiBaidu#ÔÊÐí±¾µØ¹ÜÀíacl Manager proto cache_objectacl Localhost src 127.0.0.1 192.168.1.1http_access allow Manager Localhosthttp_access deny Manager#½ö½öÔÊÐí80¶Ë¿ÚµÄ´úÀíacl Safe_ports port 80 # httphttp_access deny !Safe_portshttp_access allow all#SquidÐÅÏ¢ÉèÖÃvisible_hostname www.test137.comcache_mgr webmaster@test137.com#»ù±¾ÉèÖÃcache_effective_user squidcache_effective_group squidtcp_recv_bufsize 65535 bytes#2.5µÄ·´Ïò´úÀí¼ÓËÙÅäÖÃ#httpd_accel_host 127.0.0.1#httpd_accel_port 80#httpd_accel_single_host on#httpd_accel_uses_host_header on#httpd_accel_with_proxy on#2.6µÄ·´Ïò´úÀí¼ÓËÙÅäÖÃ#´úÀíµ½±¾»úµÄ80¶Ë¿ÚµÄ·þÎñ£¬½ö½ö×öΪԭʼÄÚÈÝ·þÎñÆ÷cache_peer 127.0.0.1 parent 80 0 no-query originserver#´íÎóÎĵµerror_directory /usr/local/squid/share/errors/Simplify_Chinese#µ¥Ì¨Ê¹Ó㬲»Ê¹Óøù¦ÄÜicp_port 0

¡¡¡¡4. http·þÎñÆ÷ÅäºÏÉèÖÃ:
http·þÎñÆ÷£¬¼àÌýµ½127.0.0.1µÄ80¶Ë¿Ú¡£

¡¡¡¡5. Êý¾Ý×ßÏò£º
·ÃÎÊÕß=>192.168.1.1:80=>127.0.0.1:80

¡¡¡¡6. ²âÊÔ£º
/usr/local/squid/sbin/squid -z
/usr/local/squid/sbin/squid -NCd1
¡¡¡¡ºÃÁË£¬ÏÖÔÚ·ÃÎÊÄãµÄ·þÎñÆ÷¿´¿´£¬ÒѾ­ºÃÁË¡£

¡¡¡¡ÎªÁ˲âÊÔÊÇ·ñ¿ÉÓ㬰Ñhttp·þÎñÆ÷¸øÍ£ÁË£¬Äã¾Í¿ÉÒÔ¿´µ½squid2.6µÄÐÅÏ¢ÁË¡£

¡¡¡¡ÁíÍ⣬ÎÒÃÇÉèÖãº
SQUID¼àÌýÍⲿIPµÄ80¶Ë¿Ú
HTTP·þÎñÆ÷¼àÌý±¾»ú127.0.0.1µÄ80¶Ë¿Ú
ÕâÑù×Ó²»ÓÃÈκηÀ»ðǽ²ÎÓ룬¼´¿ÉÍê³Éweb·´Ïò´úÀí¼ÓËÙ¡£]]> 2007-10-29T22:06:52 +0800 http://www.DoMsN.net/exurl.php/reply/639.html
¡¡¡¡ÉèÖôúÀí·þÎñÆ÷

¡¡¡¡Ð£Ô°Íøͨ¹ýLinuxÉÏÍø£¬ÔÚÍø¹ØÉÏÀûÓÃSquid¼ÜÉè´úÀí·þÎñÆ÷¡£

¡¡¡¡Ê×ÏÈÒª°²×°ºÃLinux£¬ÎÒÓõÄÊÇÒ××°ºÃÓõÄRedHat Linux 7.2¡£ÔÚ°²×°RedHat Linux 7.2ʱ£¬SquidÒÑͬʱ°²×°ºÃ£¬ÎÒÃÇÖ»Ðè¼òµ¥µÄÅäÖÃһϾÍÄÜʹÓá£

¡¡¡¡RedHat Linux 7.2°²×°ºóĬÈÏÊÇδÔËÐÐApache£¬¹ÊÓ¦ÏÈÆôÓÃSquid£¬È·±£Squid´úÀí·þÎñÆ÷ÄÜÕý³£¹¤×÷¡£ÐÞ¸Ä/etc/squid/squid.confÅäÖÃÎļþ¡£

¡¡¡¡http_port 3128 (¶¨ÒåSquid¼àÌýHTTP¿Í»§¶ËÇëÇóµÄ¶Ë¿Ú)

¡¡¡¡cache_mem 10 MB (Squid¿ÉÒÔʹÓõÄÄÚ´æÀíÏëÖµ£¬Ò»°ãÉèΪÎïÀíÄÚ´æµÄ1/3)

¡¡¡¡cache_swap_low 95

¡¡¡¡cache_swap_low 90

¡¡¡¡maximum_object_size 4096 KB(´óÓÚ¸ÃÖµ¶ÔÏ󽫲»±»´æ´¢)

¡¡¡¡cache_dir ufs /var/spool/squid/cache 200 16 256(Ö¸¶¨SquidÓÃÀ´´æ´¢¶ÔÏóµÄ½»»»¿Õ¼ä´óС¼°ÆäĿ¼½á¹¹)

¡¡¡¡acl all src 192.168.1.1/24(¶¨ÒåAll Ϊ192.168.1.1Íø¶Î)

¡¡¡¡http_acceaa allow all(192.168.1.1 Íø¶ÎµÄ¿Í»§¶Ë¿ÉʹÓÃSquid´úÀíÉÏÍø)

¡¡¡¡cache_effective_user squid(ʹÓõÄÓû§ºÍÓû§×é)

¡¡¡¡cache_effective_group squid(ÆäÓà²ÎÊýÓÃĬÈÏÖµ¼´¿É)

¡¡¡¡[root@squid bin]# chmod 777 /var/spool/squid/cache(ʹ/var/spool/squid/cacheĿ¼ΪNoboayÓû§£¬¾ßÓÐдȨÏÞ)

¡¡¡¡[root@squid bin]# squid -z(ÊÖ¹¤½¨Á¢SquidµÄ»º´æĿ¼/var/spool/squid/cache)

¡¡¡¡[root@squid bin]# /etc/rc.d/init.d/squid start(Æô¶¯Squid£¬Í£Ö¹SquidÓÃ/etc/rc.d/init.d/squid stop)

¡¡¡¡ÔÚ¿Í»§¶Ë½øÐвâÊÔ£¬ÒÔWindowsΪÀý¡£ÔËÐÐIE£¬µ¥»÷¡°¹¤¾ß¡±£¬½Ó×ŵ¥»÷¡°InternetÑ¡Ï£¬ÔÙµ¥»÷¡°Á¬½Ó¡±Ñ¡Ï£¬µ¥»÷¡°¾ÖÓòÍøÉèÖá±;ÔÚ¡°¾ÖÓòÍøÉèÖá±´°¿ÚÖУ¬ÔÚ¡°µØÖ·¡±´¦ÌîÉÏSquid·þÎñÆ÷µÄIPµØÖ·:192.168.1.16£¬ÔÚ¡°¶Ë¿Ú¡±´¦ÌîÉÏ¡°3128¡±£¬È·¶¨ºóÍ˳ö¡£´Ëʱ¿Í»§¶ËÓ¦ÄÜä¯ÀÀInternet£¬ËµÃ÷SquidÒÑÕý³£ÔËÐС£
¡¡
¡¡¡¡¹ýÂ˹¦ÄܵÄÅäÖÃ

¡¡¡¡½ÓÏÂÀ´½øÐеÄÊÇÍøÕ¾¹ýÂ˹¦ÄܵÄÅäÖ᣿ÉÒÔÓÐÁ½ÖÖÅäÖ÷½·¨¡£

¡¡¡¡·½·¨Ò»

¡¡¡¡Çëµ½ftp://k12linux.mesd.k12.or.us/pub/squidguard/ÏÂÔØRPM°æ±¾µÄSquidGuard-1.2.0-3.i386.rpm¡£

¡¡¡¡#rpm -ivh squidguard-1.2.0-3.i386.rpm

¡¡¡¡(°²×°ºóÊý¾ÝĿ¼Dbhome:/var/squidguard/blacklists;ÈÕ־Ŀ¼Logdir: /var/log/squidguard)

¡¡¡¡°´ÌáʾÐÞ¸Ä/etc/squid/squid.confÎļþÖеÄÓйØÅäÖÃÐÐ:

¡¡¡¡redirect_program /usr/sbin/squidgua-

¡¡¡¡rd -c /etc/squid/squidguard.conf

¡¡¡¡redirect_child 5

¡¡¡¡ÖØÆôSquid£¬²é¿´/var/log/squidguard/squidguard.log£¬¿´×îºóÒ»ÐÐ:2002-06-23 16:13:18[2237] squidguard ready for requestsÔò±íÃ÷SquidguardÒÑÕý³£ÔËÐС£

¡¡¡¡·½·¨¶þ

¡¡¡¡Çëµ½squidguard.mesd.k12.or.us/squidguard.tar.gzÏÂÔØTAR°æ±¾µÄSquidGuard.tar.gz£¬²¢´æ·Åµ½¸ùĿ¼Ï¡£

¡¡¡¡#cd / (½øÈë¸ùĿ¼)

¡¡¡¡#tar vzxf squidguard.tar.gz

¡¡¡¡(½âѹËõÎļþµ½/usr/local/squidguard Ï£¬Êý¾ÝĿ¼Dbhome:/usr/local/squidguard/db;ÈÕ־Ŀ¼Logdir:/usr/local/squidguard/log)

¡¡¡¡ÐÞ¸Ä/etc/squid/squidguard.confÅäÖÃÎļþ:

¡¡¡¡redirect_program: /usr/local/bin/squidguard -c /etc/squid/squidguard.conf

¡¡¡¡ÖØÆôSquid£¬²é¿´/usr/local/squid guard/log/squidguard.logÈ·±£SquidGuardÒÑÕý³£ÔËÐС£

¡¡¡¡ÊÔä¯ÀÀһЩÓû¹ýÂËÍøÕ¾£¬ÈôÄܱ»Öض¨Ïòµ½Ö¸¶¨ÍøÒ³£¬Ôò˵Ã÷¹ýÂ˹¦ÄÜÒÑÆð×÷Óá£

¡¡¡¡ÔÚʹÓÃTAR°æ±¾µÄSquidGuardʱÄÜÔö¼õÊý¾Ý¡£½øÈëµ½Êý¾ÝĿ¼:/usr/local/squidguard/dbϵÄPornÎļþ¼Ð£¬Ð½¨Ò»¸öDomains.diffÎļþ£¬ÄÚÈݸñʽÊÇ(¼ÓºÅ¡°+¡±±íʾÔö¼Ó£¬¼õºÅ¡°-¡±±íʾȥ³ý):

¡¡¡¡+newsite1(°Ñnewsite1¼ÓÈë¹ýÂËÃûµ¥£¬²»ÄÜ·ÃÎÊ)

¡¡¡¡+newsite2(°Ñnewsite2¼ÓÈë¹ýÂËÃûµ¥£¬²»ÄÜ·ÃÎÊ)

¡¡¡¡-site3(°Ñsite3´Ó¹ýÂËÃûµ¥È¥µô£¬¿ÉÒÔÕý³£·ÃÎÊ)

¡¡¡¡-site4(°Ñsite4´Ó¹ýÂËÃûµ¥È¥µô£¬¿ÉÒÔÕý³£·ÃÎÊ)

¡¡¡¡È»ºóÖ´ÐÐ:#/usr/local/bin/squidguard -c /etc/squid/squidguard.conf -u

¡¡¡¡²é¿´SquidGuard.logÎļþ£¬ÈôÓÐ:

¡¡¡¡db update done

¡¡¡¡squidguard stopped(102233.823)

¡¡¡¡±íÃ÷Êý¾Ý¸üгɹ¦!ÔÙÖØÆôSquid¼´¿É¡£

¡¡¡¡´Ë·½·¨µÄÓŵã

¡¡¡¡´Ë·½·¨µÄÓŵãÊÇÅäÖ÷½±ã£¬¶ÔÓ²¼þÒªÇóµÍ£¬Ò»°ãÍËÒÛÏÂÀ´µÄ486¡¢586ÍêÈ«ÄÜʤÈΣ¬´úÀí·þÎñÆ÷¿ÉÒÔ³¤Ê±¼ä¹¤×÷¡£ÇÒËùÓÐÈí¼þ¶¼ÊÇÃâ·ÑµÄ£¬¹ýÂËÃûµ¥¸üп죬ֻÐèµ½www.squidGuard.orgÏÂÔØ×îа汾µÄ¹ýÂËÃûµ¥Êý¾Ý¿âÌæ»»¾ÉµÄ¼´¿É£¬Ò²¿ÉÒÔÊÖ¹¤Ôö¼õ¹ýÂËÃûµ¥¡£

¡¡¡¡Squid»¹¿ÉÒÔÉ趨ÉÏÍøʱ¼ä¶Î;¿ÉÒÔ¶¨ÆÚ¼ì²éÈÕÖ¾£¬¼°Ê±·¢ÏÖѧÉúÉÏÍøÖдæÔڵIJ»Á¼ÇãÏò¡£
]]> 2007-10-27T14:48:26 +0800 http://www.DoMsN.net/exurl.php/reply/638.html ±¾Îĵµ×îºó¸üÐÂÓÚ:2003Äê5ÔÂ5ÈÕ 3ʱ35·Ö
SquidÊÇÒ»¸ö¸ßÐÔÄܵĴúÀí»º³å·þÎñÆ÷,Ò²ÐíÄãÒѾ­ÓùýWindowsƽ̨ϵÄWinGate,MS Proxy ServerµÈ¹¦ÄÜÀàËƵIJúÆ·.SquidÊÇÒ»¸öÓ¦Óü¶´úÀí,ÔÚ±£Ö¤¿Í»§¶ËÖ÷»úºÍ·þÎñÆ÷Ö÷»úÍøÂçÁ¬Í¨ºó,ÐèÒª¿Í»§¶ËÈí¼þ×öÏàÓ¦µÄÉèÖúó²ÅÄÜʹÓÃ,±ÈÈç¸øInternet ExplorerÉèÖôúÀí·þÎñÆ÷µØÖ·,¶Ë¿ÚµÈ.

WEB»º´æ¹¦ÄܶÔÓÚÒ»¸ö¹æÄ£½Ï´ó,·ÃÎÊ·±Ã¦µÄÍøÂçÀ´ËµÊÇÓбØÒªµÄ,IBMÍøÕ¾ÉϵÄһƪÎÄÕÂ,Ïêϸ·ÖÎö½éÉÜÁËWEB»º´æ¸øÉÏÍøÓû§´øÀ´µÄºÃ´¦:
http://www-900.ibm.com/developerWorks/cn/web/webcachinga/index.shtml

ÏÂÃæÎÒÃǾͽéÉÜÒ»ÏÂsquidµÄÓйØÄÚÈÝ.

¡ì¡ì °²×°ÔËÐÐsquid

Redhat 7.3×Ô´øSquidµÄrpm°üsquid-2.4.STABLE6-1.7.2.i386.rpm,ÕâÀïÎÒÃÇÖ±½ÓÀûÓÃrpmÀ´°²×°Squid:

[root@rh73 /mnt/cdrom/RedHat/RPMS]# rpm -ivh squid-2.4.STABLE6-1.7.2.i386.rpm
Preparing... ########################################### [100%]
1:squid ########################################### [100%]

°²×°ºóµÄSquidÅäÖÃÎļþÔÚ/etc/squid/Ŀ¼ÏÂ,Ö»ÐèÒª¼òµ¥µÄÅäÖÃÒ»ÏÂ/etc/squid/squid.conf¾Í¿ÉÒÔÈÃËü¹¤×÷ÆðÀ´ÁË.

ĬÈÏ°²×°µÄSquidÅäÖÃÎļþÊÇÒ»¸öÁ½Ç§¶àÐеÄÎı¾,ʵÊÂÉÏÄãÓò»µ½ÉèÖÃÄÇô¶à.Óñ༭Æ÷´ò¿ª¸ÃÅäÖÃÎļþ,ÕÒµ½http_accessÉèÖò¿·Ö,°Ñ
http_access deny all
Ò»ÐиijÉ
http_access allow all

È»ºóÆô¶¯Squid:
/etc/rc.d/init.d/squid start

ÏÖÔÚÄãµÄSquid´úÀí·þÎñÆ÷ÒѾ­¿ÉÒÔʹÓÃÁË.µ½¿Í»§¶ËÉèÖÃÉÏÍøÈí¼þµÄ´úÀíÑ¡Ïî,ÒÔInternet Explorer 6.0ΪÀý,ÔÚInternetÊôÐÔÉèÖÃÀïÉèÖÃ"Á¬½Ó"ÊôÐÔ,µã"¾ÖÓòÍøÉèÖÃ"°´Å¥:


ÔÚµ¯³öµÄ¶Ô»°¿òÖÐÑ¡ÖÐ"ΪLANʹÓôúÀí·þÎñÆ÷",ÔÚµØÖ·À¸ÌîÈë´úÀí·þÎñÆ÷µØÖ·,ÕâÀïÊÇ:192.168.100.254,¶Ë¿ÚΪsquidĬÈϵÄ3128:


È·ÈÏ.´ËʱÄãÔÙÓÃInternet ExplorerÉÏÍø±ãÊÇʹÓÃsquid´úÀí.Äã¿ÉÒԲ쿴squidµÄlogÎļþÀ´¹Û²ìµ½¿Í»§¶ËÖ÷»úͨ¹ýsquidµÄ·ÃÎÊÇé¿ö:

[root@rh73 ~]# tail -f /var/log/squid/access.log

ÔÚÕâÀï,ÉÏÃæµÄÉèÖÃÖ»¶ÔInternet ExplorerÆð×÷ÓÃ.Èç¹ûÄã°´ÕÕÇ°ÃæµÄÕ½ÚÔÚLinux½ÓÈë·þÎñÆ÷ÉÏʵÏÖÁËNATµÄ¹¦ÄÜ,³ýÁËIEä¯ÀÀÆ÷Àï·ÃÎÊhttp,ftp·þÎñÊÇÔÚÓÃsquid´úÀíÍâ,ÆäËüÉÏ·ÃÎÊInternetµÄ²Ù×÷,ÈçÊÕ·¢Email,telnet,»¹ÊÇͨ¹ýNATÍê³É·ÃÎÊ.µ±Äã°Ñä¯ÀÀÆ÷µÄ´úÀíÉèÖÃÑ¡ÏîÇå³ýºó,ÄãÓÖ¿ÉÒÔ»Ö¸´µ½NAT·½Ê½·ÃÎÊInternet.

¡ì¡ì ÉèÖÃsquid

Ç°ÃæµÄÅäÖÃÊDz»¼ÓÏÞÖƵÄÔÊÐíÄÚ²¿ËùÓÐÓû§Ê¹ÓøôúÀíÉÏInternet,ÏÔÈ»Õâ²»ÊÇÒ»¸öºÜºÃµÄ·ÃÎʲßÂÔ.ÎÒÃÇ˵¹ý,´úÀí·½Ê½¶ÔÓû§È¨Ï޵ĿØÖÆÓÐ×ŷdz£·á¸»µÄÖ§³Ö.ÏÂÃæ¾Í¿´¿´squidÈçºÎʵÏÖ¶àÑù»¯µÄȨÏÞ¿ØÖƵÄ.

ÈÃÎÒÃÇÏÈÁ˽âÒ»ÏÂsquid.confµÄ¼¸¸öÅäÖÃÑ¡ÏîºÍ·ÃÎÊ¿ØÖÆÌØÐÔ:

Squid µÄ¶¨ÖÆÊÇͨ¹ýÉèÖÃËüµÄÅäÖÃÎļþ squid.conf À´ÊµÏÖµÄ,squid.conf Îļþͨ³£ÔÚ /etc/squid Ŀ¼ÏÂ.Õâ¸öÅäÖÃÎļþÄÚÈݺܶà,µ«ËüµÄÿ¸öÑ¡ÏÓÐÏ꾡µÄ˵Ã÷.ÏÂÃæÊǼ¸¸ö³£ÓõÄÅäÖòÎÊý:

http_port

Ê×ÏÈÀ´¸ü¸ÄһϠhttp_port,Õâ¸öÑ¡ÏîÖ¸¶¨ÁË Squid ¼àÌý¿Í»§ÇëÇóµÄ¶Ë¿Ú,ĬÈÏÖµÊÇ 3128.ҪʹÓôúÀí¹¦ÄÜ,½¨ÒéÕâ¸ö¶Ë¿ÚÖµºÍÔËÐÐ Squid µÄ»úÆ÷µÄ IP µØÖ·Ò»ÆðʹÓÃ,¿ÉÒÔÐ޸ijÉÏÂÃæÕâÑù:

http_port 192.168.100.254:3128

ÉÏÊöÉùÃ÷±íʾ Squid °ó¶¨ÔÚ IP µØÖ· 192.168.100.254 ÉÏ,¶Ë¿ÚΪ 3128.¶Ë¿Ú¿ÉÒÔÉèÖÃΪÈÎÒâÖµ,µ«ÒªÈ·ÈÏûÓÐÆäËû³ÌÐò»áʹÓÃͬÑùµÄ¶Ë¿Ú./etc/servicesÎļþÁгöÁ˳£Óö˿Ú,Èç¹ûÄãÏëΪsquidÉèÖÃÆäËüµÄ¶Ë¿Ú,¿ÉÒԲο¼Õâ¸öÎļþµÄÄÚÈÝ,·ÀÖ¹Öظ´ÉèÖÃ.

visible_hostname 192.168.100.254

ÔËÐÐsquidµÄÖ÷»úµÄÃû×Ö,¿ÉÒÔдÉϸûúÆ÷µÄIPµØÖ·.

cache_mgr pangty@usa.net

¹ÜÀíÔ±µÄÓʼþµØÖ·.ÔÚ·ÃÎÊ·¢Éú´íÎóʱ,visible_hostnameºÍcache_mgrÕâÁ½¸öÑ¡ÏîµÄÖµÏÔʾÔÚ´íÎóÌáʾҳÃæÄÚµÄÏà¹ØλÖÃ.

cache_mem 16 MB

¶¨Ò建´æÄÚ´æ,Ò»°ã¶¨ÒåΪÎïÀíÄÚ´æ´óСµÄ1/3.ĬÈÏÉèÖÃΪ8MB.

cache_dir Type Directory-Name Fs-specific-data [options]

¶¨ÒåÓ²ÅÌ»º´æ¿Õ¼äÒÔ´æ´¢·ÃÎʹýµÄÒ³Ãæ»òÆäËü×ÊÔ´µÄ¿½±´.TypeÊÇÖ¸´æ´¢ÀàÐÍ,Ò»°ãÉèÖÃΪufs.Directort-Name´ú±í»º´æµÄλÖÃ,ĬÈϵÄÉèÖÃÊÇcache_dir ufs /var/spool/squid 100 16 256.ÆäÖÐ100´ú±í»º´æ¿Õ¼ä×î´óΪ100M;16ºÍ256´ú±í»º´æĿ¼ÏµÄÒ»¼¶ºÍ¶þ¼¶Ä¿Â¼Êý.

·ÃÎÊ¿ØÖÆ

¿ØÖÆÓû§µÄ·ÃÎÊȨÏ޵ȹ¦ÄÜÊÇʹÓÃsquidµÄ·ÃÎÊ¿ØÖÆÌØÐÔÀ´ÊµÏÖµÄ.Squid ·ÃÎÊ¿ØÖÆÓÐÁ½¸öÒªËØ:ACLºÍ·ÃÎÊÁбí.·ÃÎÊÁбí¿ÉÒÔÔÊÐí»ò¾Ü¾øijЩÓû§¶ÔÌض¨·þÎñµÄ·ÃÎÊ.

ΪÁËʹÓÿØÖƹ¦ÄÜ,±ØÐëÏÈÉèÖà ACL.ACL ÉùÃ÷µÄ¸ñʽÈçÏÂ:

acl acl_element_name type_of_acl_element values_to_acl

ÏÂÃæÁгöһЩÖØÒªµÄ ACLÀàÐÍ(type_of_acl_element)

l src : Ô´µØÖ·(¼´¿Í»§»úIPµØÖ·)
l dst : Ä¿±êµØÖ·(¼´·þÎñÆ÷IPµØÖ·)
l srcdomain : Ô´Ãû³Æ (¼´¿Í»§»úÃû³Æ)
l dstdomain : Ä¿±êÃû³Æ (¼´·þÎñÆ÷Ãû³Æ)
l time : Ò»ÌìÖеÄʱ¿ÌºÍÒ»ÖÜÄÚµÄÒ»Ìì
l url_regex : URL ¹æÔò±í´ïʽƥÅä
l urlpath_regex: URL-path ¹æÔò±í´ïʽƥÅä,ÂÔȥЭÒéºÍÖ÷»úÃû
l proxy_auth : ͨ¹ýÍⲿ³ÌÐò½øÐÐÓû§ÑéÖ¤
l maxconn : µ¥Ò» IP µÄ×î´óÁ¬½ÓÊý

×¢:
1. acl_element_name ¿ÉÒÔÊÇÈÎÒ»¸öÔÚ ACL Öж¨ÒåµÄÃû³Æ.
2. ÈκÎÁ½¸ö ACL ÔªËز»ÄÜÓÃÏàͬµÄÃû×Ö.
3. ÿ¸ö ACL ÓÉÁбíÖµ×é³É.µ±½øÐÐÆ¥Åä¼ì²âµÄʱºò,¶à¸öÖµÓÉÂß¼­»òÔËËãÁ¬½Ó;»»ÑÔÖ®,¼´ÈÎÒ» ACLµÄÖµ±»Æ¥Åä,ÔòÕâ¸ö ACL¼´±»Æ¥Åä.
4. ²¢²»ÊÇËùÓÐµÄ ACL¶¼ÄÜʹÓ÷ÃÎÊÁбíÖеÄÈ«²¿ÀàÐÍ.
5. ²»Í¬µÄ ACLдÔÚ²»Í¬ÐÐÖÐ,Squid ½«°ÑËüÃÇ×éºÏÔÚÒ»¸öÁбíÖÐ.

ÎÒÃÇ¿ÉÒÔʹÓÃÐí¶à²»Í¬µÄ·ÃÎÊÁбí.ÎÒÃdz£ÓõÄÊÇhttp_access: ÔÊÐí HTTP ·ÃÎÊ,Õâ¸öÊÇÖ÷ÒªµÄ·ÃÎÊ¿ØÖÆÁбí.

·ÃÎÊÁбíµÄ¹æÔòÓÉһЩÀàËÆ 'allow' »ò 'deny' µÄ¹Ø¼ü×Ö¹¹³É,ÓÃÒÔÔÊÐí»ò¾Ü¾øÏòÌض¨»òÒ»×é ACL ÔªËØÌṩ·þÎñ.

×¢:
1. ÕâЩ¹æÔò°´ÕÕËüÃǵÄÅÅÁÐ˳Ðò½øÐÐÆ¥Åä¼ì²â,Ò»µ©¼ì²âµ½Æ¥ÅäµÄ¹æÔò,Æ¥Åä¼ì²â¾ÍÁ¢¼´½áÊø.
2. Ò»¸ö·ÃÎÊÁбí¿ÉÒÔÓÖ¶àÌõ¹æÔò×é³É.
3. Èç¹ûûÓÐÈκιæÔòÓë·ÃÎÊÇëÇóÆ¥Åä,ĬÈ϶¯×÷½«ÓëÁбíÖÐ×îºóÒ»Ìõ¹æÔò¶ÔÓ¦.
4. Ò»¸ö·ÃÎÊÌõÄ¿ÖеÄËùÓÐÔªËؽ«ÓÃÂß¼­ÓëÔËËãÁ¬½Ó:
http_access Action ÉùÃ÷1 AND ÉùÃ÷2 AND ÉùÃ÷ OR.
http_access Action ÉùÃ÷3
¶à¸ö http_access ÉùÃ÷¼äÓûòÔËËãÁ¬½Ó,µ«Ã¿¸ö·ÃÎÊÌõÄ¿µÄÔªËؼäÓÃÓëÔËËãÁ¬½Ó.
5. Çë¼ÇסÁбíÖеĹæÔò×ÜÊÇ×ñÑ­ÓÉÉ϶øϵÄ˳Ðò.

ÎÒÃǾßÌåÀ´¿´¿´ÈçºÎÔËÓÃaclºÍhttp_access.Ê×ÏÈ°Ñsquid.confµÄÅäÖøĻØÔ­×´,¼´ÐÞ¸Ähttp_access allow allΪhttp_access deny all.ÏÂÃæ¸ø³ö¼¸ÖÖ³£Ó÷ÃÎÊ¿ØÖÆ:

¸ù¾ÝIP¼øȨ

Ö»ÓеØַΪ192.168.100.10ºÍ192.168.100.100µÄÖն˿ÉÒÔʹÓôúÀí
ÔÚsquid.confµÄACCESS CONTROLÅäÖò¿·ÖÌí¼Ó
acl authorizedip src 192.168.100.10
acl authorizedip src 192.168.100.100
È»ºóµ½http_access²¿·Ö
ÔÚhttp_access deny allÕâÒ»ÐÐÇ°ÃæÌí¼Ó
http_access allow authorizedip

Èç¹ûÐèÒªÉèÖõÄIPµØÖ··Ç³£¶à,ÓÖ²»Á¬Ðø,ÊDz»ÊÇҪдÉÏÒ»´ó¶ÑµÄacl xxx xxx x.x.x.x ÓÐÒ»¸ö¼òµ¥µÄ·½·¨,°ÑÕâЩIPµØַдÔÚÒ»¸öÎļþÀï,±ÈÈç/etc/squid/authorizedip.txt,ÿÐÐÒ»¸ö.È»ºóÔÚsquid.confÀïÕâÑùд
acl authorizedip src "/etc/squid/authorizedip.txt"

¸ù¾Ýʱ¼ä¿ØÖÆ

¹ØÓÚʱ¼ä¶ÎµÄÉèÖÃ,¿ÉÒԲμûsquid.confÖеÄ˵Ã÷,¾ßÌåÊÇS - Sunday, M - Monday, T - Tuesday, W - Wednesday, H - Thursday, F - Friday A - Saturday,Èç¹ûÆßÌ춼ÔÊÐí,Ò²¿ÉÒÔ²»Ð´.ʱ¼ä¸ñʽÊÇH1:M1-H2:M2,ÒªÇóÊÇÇ°ÃæµÄҪСÓÚºóÃæµÄ.

# ¶¨ÒåÒ»¸ö·ÃÎÊʱ¼ä¶Î:ÿÖÜÐÇÆÚÒ»µ½ÐÇÆÚÎåµÄÉÏÎç°Ëµãµ½ÏÂÎçÎåµã,ÔÊÐíalloweduserÓû§ÔÚÕâ¸öʱ¼ä¶ÎÄÚÉÏÍø
acl accept_time time MTWHF 8:00-17:00
http_access allow alloweduser accept_time
http_access deny alloweduser

·ÃÎÊÌض¨URLµØÖ·

ËäÈ»ÎÒÃDz»Ï£ÍûËùÓеÄÈ˶¼Ê¹ÓôúÀí×ÔÓɵķÃÎÊInternet,µ«Óм¸¸öÍøÕ¾ÊÇ¿ÉÒÔÈÃÄÚ²¿Öն˶¼ÄÜ·ÃÎʵÄ.ÔÚsquid.confÀïÌí¼Ó·ÃÎÊ¿ØÖÆ:
acl alloweddomain dstdomain .linuxforum.net .linuxaid.com.cn
http_access allow alloweddomain
ͬÑùµÄ,Èç¹û²ÎÊýºÜ¶àµÄÇé¿ö,Ò²¿ÉÒÔ°ÑÕâЩÔÊÐíµÄµØÖ·Ãûдµ½Ò»¸öÎı¾Àï:
acl alloweddomain dstdomain "/etc/squid/alloweddomain.txt"
alloweddomain.txtÀïÊÇÔÊÐí·ÃÎÊÕ¾µãµÄÁбí,ÿÐÐÒ»¸ö.

¸ù¾Ý¹Ø¼ü×Ö¹ýÂËÍøÖ·

ÓÐЩÍøÕ¾(É«ÇéÍøÕ¾,¹ã¸æÍøÕ¾)ºÜÁîÈËÌÖÑá,ͨ¹ýÉèÖÃacl¿ÉÒÔºÜÈÝÒ×ÆÁ±ÎµôÕâЩվµã:
acl denyurl url_regex sex boylink xxx city69 asiaadult sehu
http_access deny denyurl
Õâ¸öÉèÖý«¹ýÂË´øÓÐsex boylink xxx city69 asiaadult sehuÕâЩ¹Ø¼ü×ÖµÄURLµØÖ·.
ºÍÇ°ÃæÒ»Ñù,Ò²¿ÉÒÔ°ÑÕâЩ¹Ø¼ü×Öдµ½Ò»¸öÎı¾Àï
acl denyedurl url_regex "/etc/squid/sex.txt"
http_access deny denyurl

»ùÓÚÓû§µÄÈÏÖ¤

Squid±¾Éí²¢²»Ö§³ÖÓû§ÑéÖ¤,ËüÊÇͨ¹ýÍⲿ³ÌÐòÌṩÓû§ÑéÖ¤¹¦ÄÜ,Óû§Í¨¹ýsquid·ÃÎÊÇ°ÐèÒªÊäÈëÓÐЧµÄÓû§ÃûºÍÃÜÂë.¿ÉÒÔÓà proxy_auth ACL ºÍ authenticate_program À´ÊµÏÖÕâ¸ö¹¦ÄÜ,ÔÚÔÊÐí·ÃÎÊÇ°Ç¿ÖƽøÐÐÓû§ÃûºÍÃÜÂëµÄºË²é.ÏÂÃæÁгöһЩ Squid ÄÜÓõ½µÄÑéÖ¤³ÌÐò:

NCSA : ʹÓà NCSA ·ç¸ñµÄÓû§ÃûºÍÃÜÂëµµ
LDAP : ʹÓà Linux Lightweight Ŀ¼·ÃÎÊЭÒé(Linux Lightweight Directory Access Protocol)
SMB : ʹÓà SMB ЭÒéµÄ·þÎñ,Èç SAMBA »ò Windows NT
MSNT : ʹÓà Windows NT µÄÓòÑéÖ¤
PAM : ʹÓà Linux µÄ¿É×°ÔØÑé֤ģ¿é
getpwam : ʹÓà Linux ÃÜÂëµµ

ʹÓÃÑéÖ¤¹¦ÄܱØÐëÓÃauthenticate_program Ñ¡ÏîÖ¸¶¨Ê¹Ê²Ã´ÑéÖ¤³ÌÐò,²¢ÇÒÇëÈ·ÈÏÑ¡¶¨µÄÑéÖ¤³ÌÐòÒÑ°²×°²¢ÄܺܺõŤ×÷.ĬÈϵÄ,ÕâЩÑéÖ¤³ÌÐò·ÅÔÚ/usr/lib/squid/Ŀ¼ÏÂ.

ÒÔNCSAÈÏ֤ΪÀý,ÐÞ¸Ä squid.conf ÎļþÑ¡¶¨ÑéÖ¤³ÌÐò:
authenticate_program /usr/lib/squid/ncsa_auth /etc/squid/passwd
acl alloweduser proxy_auth pangty
http_access allow alloweduser
ÆäÖÐ/etc/squid/passwdÊÇÓû§ºÍÃÜÂëÁбí,Õâ¸öÎļþ¿ÉÒÔÓÃapacheÈí¼þ°ü´øµÄhtpasswdÀ´²úÉú,ËüµÄÄÚÈÝ¿ÉÄÜÊÇÕâÑùµÄ:
pangty:wCQhCeZOOF3vk

pangtyÊÇÓû§Ãû,":"ºÅºóÃæµÄÊǸÃÓû§µÄÃÜÂë.

×¢Òâ:ÐÞ¸ÄÁËsquid.confÅäÖúó,ÐèÒªÖØÐÂÆô¶¯squid»òÕ߸æËßsquidÖØÐÂ×°ÈëÅäÖÃÎļþ²ÅÄÜÆð×÷ÓÃ.ÕâÑùÖ´ÐÐ:

ÖØÆðsquid:

[root@rh73 ~]# /etc/rc.d/init.d/squid restart

²»ÖØÆð,Ö»×°ÈëеÄÅäÖÃÎļþ:

[root@rh73 ~]# /etc/rc.d/init.d/squid reload

ÒÔÉÏÊÇsquidµÄ³£ÓõÄÅäÖÃÑ¡Ïî,Õâ¶ÔÓÚÒ»°ãµÄÓ¦ÓÃÀ´ËµÒѾ­×ã¹»ÁË,Èç¹ûÄãÐèÒª¸ü¶àµÄÌØÐÔÖ§³Ö,ÇëÔĶÁÏÂÃæµÄÄÚÈÝ.

¡ì¡ì ÐèÒª¸ü¶àµÄ¹¦ÄÜ

ÏÔʾÖÐÎÄ´íÎóÌáʾÐÅÏ¢

ĬÈϵÄ,squidÔÚ·¢Éú´íÎóʱÏÔʾµÄÊÇÓ¢ÎÄÌáʾÐÅÏ¢,squidµÄÌáʾÐÅÏ¢ÒѾ­±»·­Òë³ÉºÜ¶àÓïÑÔ,¿ÉÒԺܷ½±ãµÄÈÃËûÏÔʾÖÐÎÄÐÅÏ¢:

[root@rh73 ~]# cd /etc/squid/
[root@rh73 ~]# rm -f errors
[root@rh73 /etc/squid]# ln -s /usr/lib/squid/errors/Simplify_Chinese/ errors

/usr/lib/squid/errorsÏÂÃæÓÐsquidµÄ¸÷ÖÖÓïÑÔ°æ±¾µÄÌáʾÐÅÏ¢,°´Ä¿Â¼´æ·ÅÔÚ²»Í¬µÄ×ÓĿ¼ÏÂÃæ.

Ö§³Ö»ùÓÚMACµÄ¿ØÖÆÒÔ¼°·ÃÎÊ´øÓÐÏ»®ÏßµÄURL

ÓÉÓÚ¼ÆËã»úµÄIPµØÖ·ÊÇËæʱ¿ÉÒÔ¸ü¸ÄµÄ,ËùÒÔ¼´±ãÄãÉèÖÃÁËACLÏÞÖÆÖ»ÓÐijЩIPµÄ¼ÆËã»ú¿ÉÒÔ·ÃÎÊInternet,ÆäËüÈËÈÔÈ»¿ÉÒÔÔڸüÆËã»ú¹Ø»úµÄÇé¿öÏÂ,Ð޸ijÉÕâЩÔÊÐíÉÏÍøµÄIPµØÖ·ºó·ÃÎÊInternet.ÁíÍâ,Ç°ÃæÎÒÃÇÊÇʹÓÃDHCPÀ´¹ÜÀíÄÚ²¿ÍøÂçÉϵļÆËã»úµÄIPµØÖ·,ÿ̨¼ÆËã»úÿ´Î»ñµÃµÄIPµØÖ·¿ÉÄÜÊDz»Ò»ÑùµÄ,ËùÒÔ,µ¥´¿µÄͨ¹ýIPµØÖ·À´¿ØÖÆÉÏÍøȨÏÞ²¢²»ÊʺÏËùÓеij¡ºÏ,¶øMACµØÖ·Ïà¶ÔÊÇÎȶ¨µÄ,Ò»°ãÍø¿¨µÄMACµØÖ·²»Äܹ»¸ü¸Ä,ËùÒÔ»ùÓÚMACµØÖ·µÄÓû§¿ØÖƷdz£ÊʺϽâ¾öÕâÁ½ÖÖÇé¿ö´øÀ´µÄÎÊÌâ.

ÁíÍâ,ÎÒÃÇ·ÃÎÊInternetʱ,ÓÐʱºò»áÓöµ½ÕâÑùµÄÍøÕ¾µØÖ·:http://www.hello_world.com,ÔÚÍøÕ¾µÄURLµØÖ·ÀïÃæÓÐÏ»®Ïß,ÕâʱRed Hat Linux×Ô´øµÄsquidÈí¼þ°ü¿ÉÄܻᱨ¸æÎÞ·¨·ÃÎʸÃÍøÕ¾.

ÕâЩ¹¦ÄÜÐèÒªÖØбàÒësquidÔ´´úÂëÔö¼ÓÏàÓ¦µÄ±àÒëÑ¡ÏîÀ´ÊµÏÖ.ÏÂÃæÎÒÃǾÍÀ´¿´Ò»ÏÂÈçºÎʹÓÃrpmÖØбàÒëÈí¼þ°üÔ´´úÂë»ñµÃ±ØÒªµÄ¹¦ÄÜ.

µ±ÎÄÕÂдµ½ÕâÀïµÄʱºò,Red Hat LinuxÍøÕ¾·¢²¼ÁËsquidµÄÉý¼¶Èí¼þ°ü,ÎÒÃÇ¿ÉÒÔ´ÓÍøÉÏ»ñµÃËüµÄ×îÐÂÔ´´úÂërpm°ü:

ftp://updates.redhat.com/7.2/en/os/SRPMS/squid-2.4.STABLE6-6.7.3.src.rpm

ÔÚ¿ªÊ¼±àÒëÇ°,ÓÐһЩÈí¼þ°üÊÇÐèÒªÊ×ÏÈ°²×°,Õâ¿ÉÄÜ°üÀ¨rpm-build,sgml-tools,Ç°ÕßÔÚRed Hat LinuxµÄ¹âÅÌÉÏ¿ÉÒÔÕÒµ½,ºóÕß¿ÉÒÔ´ÓÕâÀïÏÂÔØ:

ftp://ftp.freesoft.cei.gov.cn/.mirror2/ftp.redhat.com/redhat-7.2/i386/RedHat/RPMS/sgml-tools-1.0.9-12.i386.rpm

°²×°squidµÄÔ´´úÂë°ü

[root@rh73 ~]# rpm -ivh squid-2.4.STABLE6-6.7.3.src.rpm

°²×°ºóµÄÔ´´úÂë°üÔÚ/usr/src/redhat/SOURCESĿ¼ÏÂ,ÎÒÃǹØÐĵÄÊÇÁíÍâÒ»¸öÎļþ/usr/src/redhat/SPECS/squid.spec,ÕâÀïÃæÓÐsquidµÄÏà¹Ø±àÒëÑ¡Ïî,Ð޸ĸÃÎļþ%configure²¿·ÖÈçÏÂ:

%configure \
--exec_prefix=/usr --bindir=/usr/sbin --libexecdir=/usr/lib/squid \
--localstatedir=/var --sysconfdir=/etc/squid \
--enable-poll --enable-snmp --enable-removal-policies="heap,lru" \
--enable-storeio="aufs,coss,diskd,ufs" \
--enable-delay-pools --enable-linux-netfilter \
--with-pthreads \
--enable-underscores \
--enable-arp-acl \
--enable-err-language=Simplify_Chinese \
--enable-auth-modules="LDAP,NCSA,PAM,SMB,MSNT" # --enable-icmp

--enable-underscoresÊÇÔö¼Ó¶ÔÏ»®ÏßÍøÖ·µÄÖ§³Ö,--enable-arp-aclÊÇÔö¼ÓÖ§³ÖMACµØÖ··½Ê½µÄ¼øȨ.

¿ªÊ¼±àÒë²úÉúеÄRPM°ü:

[root@rh73 ~]# rpmbuild -ba squid.spec

ÕâÌõÃüÁ¸ù¾Ýsquid.specµÄÅäÖÃÖØбàÒëÉú³ÉеÄrpm°ü.±àÒë¹ý³ÌÊÓ»úÆ÷ÐÔÄܵĺûµ¶ø¶¨,´ó¸ÅÐèÒª¼¸·ÖÖÓµ½¼¸Ê®·ÖÖÓ²»µÈ,Èç¹ûûÓÐʲô´íÎó,×îºó²úÉúµÄеÄrpm°üÔÚ/usr/src/redhat/RPMS/i386/Ŀ¼ÏÂ:squid-2.4.STABLE6-6.7.3.i386.rpm

°²×°ÐµÄrpm°ü:

[root@rh73 ~]# rpm -Uvh /usr/src/redhat/RPMS/i386/squid-2.4.STABLE6-6.7.3.i386.rpm

×¢Òâ,ÕâÀïʹÓÃÁË-U²ÎÊý,ÊÇÒòΪÎÒÃÇÇ°ÃæÒѾ­°²×°¹ýsquidµÄÒ»¸ö½Ï¾ÉµÄ°æ±¾,-U²ÎÊýÖ¸³öÕâ¸ö²Ù×÷ÊǶÔÔ­Óа汾Èí¼þ°üµÄÉý¼¶.ÏÖÔÚÄãµÄsquid¾Í¿ÉÒÔÖ§³ÖMACµØÖ·¼øȨºÍ´øÏ»®ÏßµÄURLµØÖ·ÁË. 8)

ÅäÖÃsquid.confÀ´Ö§³ÖMACµØÖ·¼øȨ,ÔÚsquid.confÀï¼ÓÈëÕâÑùµÄÄÚÈÝ:

acl allowedmac arp 00:10:DC:8F:5B:FF
http_access allow allowedmac

ÉÏÃæÖ»Êdz£Óõļ¸ÖÖACLÉèÖõÄʾÀý,¹ØÓÚACL¿ÉÒÔ·ÃÎÊsquidÖ÷Ò³ÉÏFAQÎĵµµÄAccess Controls²¿·Ö»ñµÃ¸ü¶àµÄÐÅÏ¢:
http://www.squid-cache.org/Doc/FAQ/FAQ-10.html

¡ì¡ì ÅäÖÃ͸Ã÷´úÀí

͸Ã÷´úÀíÊÇNATºÍ´úÀíµÄÍêÃÀ½áºÏ,Ö®ËùÒÔ³ÆΪ͸Ã÷,ÊÇÒòΪÔÚÕâÖÖ¹¤×÷·½Ê½ÏÂÄã¸Ð¾õ²»µ½´úÀíµÄ´æÔÚ,ºÍµ¥´¿Ê¹ÓÃNATÒ»Ñù,¶ÔÉÏÍøµÄ¿Í»§¶ËûÓÐÈκÎÌØÊâµÄÉèÖÃ.Squid¿ÉÒÔͨ¹ýÅäÖÃÖ§³Ö͸Ã÷´úÀí.

ºÜ¶àÎÄÕ½²µ½¹²ÏíÉÏÍø¾Í»á½²ÓйØ͸Ã÷´úÀí(iptables + squid»òipchains + squid)µÄÄÚÈÝ,ÎÒ¸öÈËÈÏΪ¶ÔÓÚ¹æÄ£²»´óµÄÍøÂç,ÓÖûÓÐÄÚÈݹýÂ˵ȹ¦ÄܵÄÒªÇó,ʹÓÃsquidÊÇûÓбØÒªµÄ,µ¥´¿µÄʹÓÃNAT·½Ê½¾Í×ã¹»ÁË,²¢ÇÒÕâÑù¶ÔÔËÐÐNATµÄ·þÎñÆ÷µÄÒªÇó¾Í¸ü¼ÓµÍ,±ÈÈçʹÓÃһ̨486 + 4MÄÚ´æµÄ»úÆ÷,Èç¹ûʹÓÃÄÇЩ¾­¹ýÌØÊⶨÖƵÄLinuxϵͳ,ÉõÖÁÁ¬Ó²Å̶¼²»ÐèÒª,Ö»ÒªÒ»ÕÅÈíÅ̾ͿÉÒÔÁË.

Èç¹ûÊÇÔ´´úÂ뷽ʽ±àÒë°²×°µÄsquid,ÇëÔÚ±àÒëÑ¡ÏîÀïÖ¸Ã÷--enable-linux-netfilterÑ¡Ïî.Red Hat Linux×Ô´øµÄsquidÖ§³Ö͸Ã÷´úÀí,ÎÒÃÇ¿ÉÒÔÖ±½ÓÐÞ¸Ä/etc/squid/squid.confÎļþ,ÉèÖñØÒªµÄ²ÎÊý:

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

ÔËÐÐ/etc/rc.d/init.d/squid reloadʹÉèÖÃÉúЧ,È»ºóÐÞ¸Äfw.sh½Å±¾,ÔÚ×îºóÌí¼ÓÕâÑùÒ»ÐÐ:

iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128

Õ⽫°ÑËùÓоÖÓòÍøÓû§Í¨¹ýLinux½ÓÈë·þÎñÆ÷·ÃÎÊwww·þÎñµÄ·ÃÎÊÇëÇóÖض¨Ïòµ½¹¤×÷ÔÚ3128¶Ë¿ÚµÄsquid´¦Àí.ÔËÐÐfw.sh½Å±¾,ʹÉèÖÃÉúЧ.¾ÍÕâô¼òµ¥!

Äã¿ÉÄÜ»¹¼ÇµÃfw.shÀïÃæµÄ¹ØÓÚNATµÄ¹æÔò:
iptables -A POSTROUTING -t nat -s 192.168.100.0/24 -o eth0 -j SNAT --to-source 61.156.35.114

ÓÉÓÚPREROUTING¹æÔò×ÜÔÚPOSTROUTING¹æÔò֮ǰӦÓÃ,ËùÒÔ²»Óõ£ÐÄsquid±»NAT¹æÔòÆÁ±Îµô.

×¢Òâ:ʹÓÃ͸Ã÷´úÀíʱ,ÎÞ·¨Í¬Ê±Ê¹ÓÃsquid»ùÓÚÓû§ÕʺŵÄÑéÖ¤¹¦ÄÜ!

ÏëÁ˽â¸ü¶à¹ØÓÚ͸Ã÷´úÀíµÄ×ÊÁÏ,Çë·ÃÎÊTLDP(The Linux Documentation Project)ÉϹØÓÚ͸Ã÷´úÀíµÄHOWTOÎĵµ:
http://www.tldp.org/HOWTO/mini/TransparentProxy.html

¡ì¡ì Ò»¸ösquid.confµÄÅäÖÃʵÀý

ÏÖÔÚ¸ø³öÒ»¸öÖ§³Ö͸Ã÷´úÀí²¢Ê¹ÓÃMACµØÖ·¿ØÖÆÓû§ÉÏÍøȨÏÞµÄsquidÅäÖÃÎļþ,¸ÃÅäÖû¹Ö§³ÖÌض¨ÍøÕ¾(ÈçÉ«ÇéÍøÕ¾)µÄ¹ýÂ˹¦ÄÜ:

#¶¨Òå·þÎñÆ÷µØÖ·ºÍ¶Ë¿Ú
http_port 192.168.100.254:3128

#¶¨Òå·þÎñÆ÷Ãû×Ö
visible_hostname 192.168.100.254

#¶¨Òå¹ÜÀíÔ±ÓʼþµØÖ·
cache_mgr pangty@usa.net

#¶¨Ò建´æÄÚ´æ¿Õ¼äºÍ»º´æĿ¼
cache_mem 16 MB
cache_dir ufs /var/spool/squid 100 16 256

#Ö§³Ö͸Ã÷´úÀí
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

#¶¨Òåacl
#sexurl.txtÁгöÒª¹ýÂËÉ«ÇéÍøÕ¾µØÖ·µÄ¹Ø¼ü×Ö,ÿ¸ö¹Ø¼ü×ÖÕ¼Ò»ÐÐ,Èçxchina
#maclist.txtÁгöÔÊÐíÉÏÍøµÄÖ÷»úµÄMACµØÖ·,ÿ¸öµØÖ·Õ¼Ò»ÐÐ,Èç00:50:56:C0:00:08
acl all src 0.0.0.0/0.0.0.0
acl sexurl url_regex "/etc/squid/sexurl.txt"
acl allowedmac arp "/etc/squid/maclist.txt"

#¶¨Òå·ÃÎʲßÂÔ
http_access deny sexurl
http_access allow allowedmac
http_access deny all ]]> 2007-10-27T14:16:58 +0800 http://www.DoMsN.net/exurl.php/reply/637.html yumÔ´À´×Ôchinalinuxpub.com,ÓõÄÊÇcentos°ü,
ÏÂÔصØÖ·: http://www.chinalinuxpub.com/yum.tgz
°²×°:
tar zxvf yum.tgz
cd yum
rpm -ivh *.rpm

rm -rf /etc/yum.repos.d/CentOS-Base.repo
vi /etc/yum.repos.d/as4-update.repo
¼ÓÈ룺
#released updates
[update]
name=Red Hat Enterprise AS release 4 Updates
baseurl=http://ftp.chinalinuxpub.com/redhat/enterprise/updates/4AS/
gpgcheck=1
gpgkey=http://ftp.chinalinuxpub.com/redhat/enterprise/RPM-GPG-KEY-linuxpub

vi /etc/yum.repos.d/as4-base.repo
¼ÓÈ룺
#released base
[base]
name=Red Hat Enterprise AS release 4 Updates
baseurl=http://ftp.chinalinuxpub.com/redhat/enterprise/os/i***/RedHat/
gpgcheck=1
gpgkey=http://ftp.chinalinuxpub.com/redhat/enterprise/RPM-GPG-KEY-linuxpub

È»ºó¾Í¿ÉÒÔÕý³£Ê¹ÓÃyumÁË.

µÚ¶þÖÖ·½·¨:ÀûÓÃCentOS µÄyum¿âÉý¼¶RHEL AS4
1.ÏÂÔز¢°²×°yum-2.4.0-1.centos4.noarch.rpmÎļþ£¬ÏÂÔصØַΪ£º
ftp://ftp.pbone.net/mirror/ftp.centos.org/4.2/os/alpha/CentOS/RPMS/yum-2.4.0-1.centos4.noarch.rpm

2.Ð޸Ļò½¨Á¢/etc/yum.repos.d/CentOS-Base.repoΪÈçÏÂÄÚÈÝ£º
[base]
name=CentOS-$releasever - Base
baseurl=http://ftp.riken.jp/Linux/caos/centos/4.0/os/$basearch/
gpgcheck=1

#released updates
[update]
name=CentOS-$releasever - Updates
baseurl=http://ftp.riken.jp/Linux/caos/centos/4.0/updates/$basearch/
gpgcheck=1

#packages used/produced in the build but not released
[addons]
name=CentOS-$releasever - Addons
baseurl=http://ftp.riken.jp/Linux/caos/centos/4.0/addons/$basearch/
gpgcheck=1

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
baseurl=http://ftp.riken.jp/Linux/caos/centos/4.0/extras/$basearch/
gpgcheck=1

3.Ð޸Ļò½¨Á¢/etc/yum.repos.d/dag.repoΪÈçÏÂÄÚÈÝ£º
[dag]
name=Dag RPM Repository for RHEL4
baseurl=http://ftp.riken.jp/Linux/dag/redhat/el4/en/$basearch/dag/
enabled=1
gpgcheck=1
gpgkey=http://ftp.riken.jp/Linux/dag/packages/RPM-GPG-KEY.dag.txt

4.ÔËÐÐupdate:
yum update

5.Éý¼¶£º
yum upgrade

6.°²×°ÆäËüÈí¼þ£¬ÀýÈ磺
yum install mplayer
]]> 2007-10-26T23:38:14 +0800 http://www.DoMsN.net/exurl.php/reply/636.html ns.spt.net.cn 202.96.199.133
ns.cn.net 202.97.16.195
202.106.0.20
202.106.148.1
202.106.196.115
¹ã¶«DNSµØÖ·£ºns.guangzhou.gd.cn 202.96.128.143
dns.guangzhou.gd.cn 202.96.128.68
ÉîÛÚDNSµØÖ·£ºns.shenzhen.gd.cn 202.96.134.133
202.96.154.8
202.96.154.15
ÉϺ£DNSµØÖ·£ºns.sta.net.cn 202.96.199.132
202.96.199.133
202.96.209.5
202.96.209.133
ÖØÇìDNSµØÖ·£º61.128.128.68
61.128.192.4
Ìì½òDNSµØÖ·£ºns.tpt.net.cn 202.99.96.68
Õã½­DNSµØÖ·£ºdns.zj.cninfo.net 202.96.102.3
202.96.96.68
202.96.104.18
ÉÂÎ÷DNSµØÖ·£ºns.snnic.com 202.100.13.11
Î÷°²DNSµØÖ·£º202.100.4.15
202.100.0.68
ÁÉÄþDNSµØÖ·£ºns.dcb.ln.cn 202.96.75.68
202.96.75.64
202.96.64.68
202.96.69.38
202.96.86.18
202.96.86.24
½­ËÕDNSµØÖ·£ºpub.jsinfo.net 202.102.29.3
202.102.13.141
202.102.24.35
°²»ÕDNSµØÖ·£º202.102.192.68
202.102.199.68
ËÄ´¨DNSµØÖ·£ºns.sc.cninfo.net 61.139.2.69
³É¶¼DNSµØÖ·£º202.98.96.68
202.98.96.69
ºÓ±±DNSµØÖ·£ºns.hesjptt.net.cn 202.99.160.68
±£¶¨DNSµØÖ·£º202.99.160.68
202.99.166.4
ɽÎ÷DNSµØÖ·£ºns.sxyzptt.net.cn 202.99.198.6
¼ªÁÖDNSµØÖ·£ºns.jlccptt.net.cn 202.98.5.68
ɽ¶«DNSµØÖ·£º202.102.152.3
202.102.128.68
¸£½¨DNSµØÖ·£ºdns.fz.fj.cn 202.101.98.55
ÏÃÃÅDNSµØÖ·£º202.101.103.55
202.101.103.54
ºþÄÏDNSµØÖ·£º202.103.100.206
³¤É³DNSµØÖ·£º202.103.96.68
202.103.96.112
¹ãÎ÷DNSµØÖ·£º10.138.128.40
202.103.224.68
202.103.225.68
½­Î÷DNSµØÖ·£º202.109.129.2
ÔÆÄÏDNSµØÖ·£ºns.ynkmptt.net.cn 202.98.160.68
ºÓÄÏDNSµØÖ·£º202.102.227.68
202.102.224.68
202.102.245.12
Î人DNSµØÖ·£º202.103.24.68
202.103.0.117
ɽ¶«DNSµØÖ·£º202.102.134.68
н®DNSµØÖ·£º61.128.97.73
ÎÚ³ľÆëDNSµØÖ·£º61.128.97.73
61.128.97.74
Ïã¸ÛDNSµØÖ·£ºns1.netvigator.com 205.252.144.228
°ÄÃÅDNSµØÖ·£ºvassun2.macau.ctm.net 202.175.3.8
]]> 2007-10-26T11:29:45 +0800 http://www.DoMsN.net/exurl.php/reply/635.html
¡¡¡¡°²×°Íê³Éºó£¬½ÓÏÂÀ´Òª¶ÔSquidµÄÔËÐнøÐÐÅäÖá£ËùÓÐÏîÄ¿¶¼ÔÚsquid.confÖÐÍê³É¡£Squid×Ô´øµÄsquid.conf°üÀ¨·Ç³£Ï꾡µÄ˵Ã÷£¬Ï൱ÓÚһƪÓû§Êֲᣬ¶ÔÅäÖÃÓÐÈκÎÒÉÎʶ¼¿ÉÒÔ²ÎÕÕ½â¾ö¡£

¡¡¡¡ÔÚÕâ¸öÀý×ÓÖУ¬´úÀí·þÎñÆ÷ͬʱҲÊÇÍø¹Ø£¬ÄÚ²¿ÍøÂç½Ó¿Úeth0µÄIPµØַΪ192.168.0.1£¬ÍⲿÍøÂç½Ó¿Úeth1µÄIPµØַΪ202.103.x.x¡£ÏÂÃæÊÇÒ»¸ö»ù±¾µÄ´úÀíËùÐèÒªÅäÖÃÑ¡Ï

¡¡¡¡http_port 192.168.0.1:3128

¡¡¡¡Ä¬È϶˿ÚÊÇ3128£¬µ±È»Ò²¿ÉÒÔÊÇÈκÎÆäËü¶Ë¿Ú£¬Ö»Òª²»ÓëÆäËü·þÎñ·¢Éú³åÍ»¼´¿É¡£ÎªÁË°²È«Æð¼û£¬ÔÚÇ°Ãæ¼ÓÉÏIPµØÖ·£¬Squid¾Í²»»á¼àÌýÍⲿµÄÍøÂç½Ó¿Ú¡£

¡¡¡¡ÏÂÃæµÄÅäÖÃÑ¡ÏîÊÇ·þÎñÆ÷¹ÜÀíÕߵĵç×ÓÓʼþ£¬µ±´íÎó·¢Éúʱ£¬¸ÃµØÖ·»áÏÔʾÔÚ´íÎóÒ³ÃæÉÏ£¬±ãÓÚÓû§ÁªÏµ£º

¡¡¡¡cache_mgr start@soocol.com

¡¡¡¡ÒÔÏÂÕâЩ²ÎÊý¸æËßSquid»º´æµÄÎļþϵͳ¡¢Î»Öúͻº´æ²ßÂÔ£º

¡¡¡¡cache_dir ufs /var/squid
¡¡¡¡cache_mem 32MB
¡¡¡¡cache_swap_low 90
¡¡¡¡cache_swap_high 95

¡¡¡¡ÔÚÕâÀSquid»á½«/var/squidĿ¼×÷Ϊ±£´æ»º´æÊý¾ÝµÄĿ¼£¬Ã¿´Î´¦ÀíµÄ»º´æ´óСÊÇ32Õ××Ö½Ú£¬µ±»º´æ¿Õ¼äʹÓôﵽ95%ʱ£¬ÐµÄÄÚÈݽ«È¡´ú¾ÉµÄ¶ø²»Ö±½ÓÌí¼Óµ½Ä¿Â¼ÖУ¬Ö±µ½¿Õ¼äÓÖϽµµ½90%²ÅÍ£Ö¹ÕâÒ»»î¶¯¡£Èç¹û²»ÏëSquid»º´æÈκÎÎļþ£¬ÈçijЩ´æ´¢¿Õ¼äÓÐÏÞµÄרÓÐϵͳ£¬¿ÉÒÔʹÓÃnullÎļþϵͳ£¨ÕâÑù²»ÐèÒªÄÇЩ»º´æ²ßÂÔ£©£º

¡¡¡¡cache_dir null /tmp

¡¡¡¡ÏÂÃæµÄ¼¸¸ö¹ØÓÚ»º´æµÄ²ßÂÔÅäÖÃÖУ¬½ÏÖ÷ÒªµÄÊǵÚÒ»ÐУ¬¼´Óû§µÄ·ÃÎʼǼ£¬¿ÉÒÔͨ¹ý·ÖÎöËüÀ´Á˽âËùÓÐÓû§·ÃÎʵÄÏ꾡µØÖ·£º

¡¡¡¡cache_access_log /var/squid/access.log
¡¡¡¡cache_log /var/squid/cache.log
¡¡¡¡cache_store_log /var/squid/store.log

¡¡¡¡ÏÂÃæÕâÐÐÅäÖÃÊÇÔÚ½Ïа汾ÖгöÏֵIJÎÊý£¬¸æËßSquidÔÚ´íÎóÒ³ÃæÖÐÏÔʾµÄ·þÎñÆ÷Ãû³Æ£º

¡¡¡¡visible_hostname No1.proxy

¡¡¡¡ÒÔÏÂÅäÖøæËßSquidÈçºÎ´¦ÀíÓû§£¬¶Ôÿ¸öÇëÇóµÄIPµØÖ·×÷Ϊµ¥¶ÀµØÖ·´¦Àí£º

¡¡¡¡client_mask 255.255.255.255

¡¡¡¡Èç¹ûÊÇÆÕͨ´úÀí·þÎñÆ÷£¬ÒÔÉϵÄÅäÖÃÒѾ­×ã¹»¡£µ«ÊǺܶàSquid¶¼±»ÓÃÀ´×ö͸Ã÷´úÀí¡£Ëùν͸Ã÷´úÀí£¬¾ÍÊÇ¿Í»§¶Ë²»ÖªµÀÓдúÀí·þÎñÆ÷µÄ´æÔÚ£¬µ±È»Ò²²»ÐèÒª½øÐÐÈκÎÓë´úÀíÓйصÄÉèÖ㬴Ӷø´ó´ó·½±ãÁËϵͳ¹ÜÀíÔ±¡£Ïà¹ØµÄÑ¡ÏîÓÐÒÔϼ¸¸ö£º

¡¡¡¡httpd_accel_host virtual
¡¡¡¡httpd_accel_port 80
¡¡¡¡httpd_accel_with_proxy on
¡¡¡¡httpd_accel_user_host_header on

¡¡¡¡ÔÚLinuxÉÏ£¬¿ÉÒÔÓÃiptables/ipchainsÖ±½Ó½«¶ÔWeb¶Ë¿Ú80µÄÇëÇóÖ±½Óת·¢µ½Squid¶Ë¿Ú3128£¬ÓÉSquid½ÓÊÖ£¬¶øÓû§ä¯ÀÀÆ÷ÈÔÈ»ÈÏΪËü·ÃÎʵÄÊǶԷ½µÄ80¶Ë¿Ú¡£ÀýÈçÒÔÏÂÕâÌõÃüÁ

¡¡¡¡iptables -t nat -A PREROUTING -s 192.168.0.200/32 -p tcp --dport 80 -j REDIRECT 3128

¡¡¡¡¾ÍÊǽ«192.168.0.200µÄËùÓÐÕë¶Ô80¶Ë¿ÚµÄ·ÃÎÊÖض¨Ïòµ½3128¶Ë¿Ú¡£

¡¡¡¡ËùÓÐÉèÖÃÍê³Éºó£¬¹Ø¼üÇÒÖØÒªµÄÈÎÎñÊÇ·ÃÎÊ¿ØÖÆ¡£SquidÖ§³ÖµÄ¹ÜÀí·½Ê½ºÜ¶à£¬Ê¹ÓÃÆðÀ´Ò²·Ç³£¼òµ¥£¨ÕâÒ²ÊÇÓÐÈËÄþԸʹÓò»×öÈκλº´æµÄSquid£¬Ò²²»Ô¸Òâµ¥¶ÀʹÓÃiptablesµÄÔ­Òò£©¡£Squid¿ÉÒÔͨ¹ýIPµØÖ·¡¢Ö÷»úÃû¡¢MACµØÖ·¡¢Óû§/ÃÜÂëÈÏÖ¤µÈʶ±ðÓû§£¬Ò²¿ÉÒÔͨ¹ýÓòÃû¡¢Óòºó׺¡¢ÎļþÀàÐÍ¡¢IPµØÖ·¡¢¶Ë¿Ú¡¢URLÆ¥ÅäµÈ¿ØÖÆÓû§µÄ·ÃÎÊ£¬»¹¿ÉÒÔʹÓÃʱ¼äÇø¼ä¶ÔÓû§½øÐйÜÀí£¬ËùÒÔ·ÃÎÊ¿ØÖÆÊÇSquidÅäÖÃÖеÄÖص㡣SquidÓÃACL£¨Access Control List£¬·ÃÎÊ¿ØÖÆÁÐ±í£©¶Ô·ÃÎÊÀàÐͽøÐл®·Ö£¬ÓÃhttp_access deny »òallow½øÐпØÖÆ¡£¸ù¾ÝÐèÇóÊ×Ïȶ¨ÒåÁ½×éÓû§advanceºÍnormal£¬»¹Óдú±íËùÓÐδָÃ÷µÄÓû§×éall¼°²»ÔÊÐíÉÏÍøµÄbaduser£¬ÅäÖôúÂëÈçÏ£º

¡¡¡¡acl advance 192.168.0.2-192.168.0.10/32
¡¡¡¡acl normal src 192.168.0.11-192.168.0.200/32
¡¡¡¡acl baduser src 192.168.0.100/32
¡¡¡¡acl baddst dst www.soocol.com
¡¡¡¡acl all src 0.0.0.0/0

¡¡¡¡http_access deny baduser
¡¡¡¡http_access allow advance
¡¡¡¡http_access allow normal

¡¡¡¡¿ÉÒÔ¿´³ö£¬ACLµÄ»ù±¾¸ñʽÈçÏ£º

¡¡¡¡acl ÁбíÃû³Æ ¿ØÖÆ·½Ê½ ¿ØÖÆÄ¿±ê

¡¡¡¡±ÈÈçacl all src 0.0.0.0/0£¬ÆäÃû³ÆÊÇall£¬¿ØÖÆ·½Ê½ÊÇsrcÔ´IPµØÖ·£¬¿ØÖÆÄ¿±êÊÇ0.0.0.0/0µÄIPµØÖ·£¬¼´ËùÓÐ䶨ÒåµÄÓû§¡£³öÓÚ°²È«¿¼ÂÇ£¬×ÜÊÇÔÚ×îºó½ûÖ¹Õâ¸öÁÐ±í¡£

¡¡¡¡ÏÂÃæÕâ¸öÁбí´ú±í¸ß¼¶Óû§£¬°üÀ¨IPµØÖ·´Ó192.168.0.2µ½192.168.0.10µÄËùÓмÆËã»ú£º

¡¡¡¡acl advance 192.168.0.2-192.168.0.20/32

¡¡¡¡ÏÂÃæÕâ¸öbaduserÁбíÖ»°üº¬Ò»Ì¨¼ÆËã»ú£¬ÆäIPµØÖ·ÊÇ192.168.0.100£º

¡¡¡¡acl baduser 192.168.0.100/32

¡¡¡¡ACLдÍêºó£¬½ÓÏÂÀ´Òª¶ÔËüÃÇ·Ö±ð½øÐйÜÀí£¬´úÂëÈçÏ£º

¡¡¡¡http_access deny baduser
¡¡¡¡http_access allow advance
¡¡¡¡http_access allow normal

¡¡¡¡ÉÏÃ漸ÐдúÂë¸æËßSquid²»ÔÊÐíbaduser×é·ÃÎÊInternet£¬µ«advance¡¢normal×éÔÊÐí£¨´Ëʱ»¹Ã»ÓÐÖ¸¶¨ÏêϸµÄȨÏÞ£©¡£ÓÉÓÚSquidÊÇ°´ÕÕ˳Ðò¶ÁÈ¡¹æÔò£¬»áÊ×ÏȽûÖ¹baduser£¬È»ºóÔÊÐínormal¡£Èç¹û½«Á½Ìõ¹æÔò˳Ðòµßµ¹£¬ÓÉÓÚbaduserÔÚnormal·¶Î§ÖУ¬SquidÏÈÔÊÐíÁËËùÓеÄnormal£¬ÄÇôÔÙ½ûÖ¹baduser¾Í²»»áÆð×÷Óá£

¡¡¡¡ÌرðҪעÒâµÄÊÇ£¬Squid½«Ê¹ÓÃallow-deny-allow-deny¡­¡­ÕâÑùµÄ˳ÐòÌ×ÓùæÔò¡£ÀýÈ磬µ±Ò»¸öÓû§·ÃÎÊ´úÀí·þÎñÆ÷ʱ£¬Squid»á˳Ðò²âÊÔSquidÖж¨ÒåµÄËùÓйæÔòÁÐ±í£¬µ±ËùÓйæÔò¶¼²»Æ¥Åäʱ£¬Squid»áʹÓÃÓë×îºóÒ»ÌõÏà·´µÄ¹æÔò¡£¾ÍÏñÉÏÃæÕâ¸öÀý×Ó£¬¼ÙÉèÓÐÒ»¸öÓû§µÄIPµØÖ·ÊÇ192.168.0.201£¬ËûÊÔͼͨ¹ýÕą̂´úÀí·þÎñÆ÷·ÃÎÊInternet£¬»á·¢ÉúʲôÇé¿öÄØ£¿ÎÒÃǻᷢÏÖ£¬ËûÄܹ»Õý³£·ÃÎÊ£¬ÒòΪSquidÕÒ±éËùÓзÃÎÊÁбíҲûÓкÍ192.168.0.201ÓйصĶ¨Ò壬±ã¿ªÊ¼Ó¦ÓùæÔò£¬¶ø×îºóÒ»ÌõÊÇdeny£¬ÄÇôSquidĬÈϵÄÏÂÒ»Ìõ´¦Àí¹æÔòÊÇallow£¬ËùÒÔ192.168.0.201·´¶øÄܹ»·ÃÎÊInternetÁË£¬ÕâÏÔÈ»²»ÊÇÎÒÃÇÏ£ÍûµÄ¡£ËùÒÔÔÚËùÓÐsquid.confÖУ¬×îºóÒ»Ìõ¹æÔòÓÀÔ¶ÊÇhttp_access deny all£¬¶øall¾ÍÊÇÇ°Ã涨ÒåµÄ¡°src 0.0.0.0¡±¡£

¡¡¡¡2.¸ß¼¶¿ØÖÆ

¡¡¡¡Ç°Ãæ˵¹ý£¬SquidµÄ¿ØÖƹ¦Äܷdz£Ç¿´ó£¬Ö»ÒªÀí½âSquidµÄÐÐΪ·½Ê½£¬»ù±¾ÉϾÍÄܹ»Âú×ãËùÓеĿØÖÆÒªÇó¡£ÏÂÃæ¾ÍÒ»²½Ò»²½À´Á˽âSquidÊÇÈçºÎ½øÐпØÖƹÜÀíµÄ¡£

¡¡¡¡Í¨¹ýIPµØÖ·À´Ê¶±ðÓû§ºÜ²»¿É¿¿£¬±ÈIPµØÖ·¸üºÃµÄÊÇÍø¿¨µÄMACÎïÀíµØÖ·¡£ÒªÔÚSquidÖÐʹÓÃMACµØַʶ±ð£¬±ØÐëÔÚ±àÒëʱ¼ÓÉÏ¡°--enable-arp-acl¡±Ñ¡ÏȻºó¿ÉÒÔͨ¹ýÒÔϵÄÓï¾äÀ´Ê¶±ðÓû§£º

¡¡¡¡acl advance arp 00:01:02:1f:2c:3e 00:01:02:3c:1a:8b ...

¡¡¡¡ËüÖ±½ÓʹÓÃÓû§µÄMACµØÖ·£¬¶øMACµØÖ·Ò»°ãÊDz»Ò×Ð޸ĵģ¬¼´Ê¹ÓÐÆÕͨÓû§½«×Ô¼ºµÄIPµØÖ·¸ÄΪ¸ß¼¶Óû§Ò²ÎÞ·¨Í¨¹ý£¬ËùÒÔÕâÖÖ·½Ê½±ÈIPµØÖ·¿É¿¿µÃ¶à¡£

¡¡¡¡¼ÙÈç²»ÏëÈÃÓû§·ÃÎÊij¸öÍøÕ¾Ó¦¸ÃÔõô×öÄØ£¿¿ÉÒÔ·ÖΪÁ½ÖÖÇé¿ö£ºÒ»ÖÖÊDz»ÔÊÐí·ÃÎÊij¸öÕ¾µãµÄij¸öÖ÷»ú£¬±ÈÈçokµÄÖ÷»úÊÇok.sina.com.cn£¬¶øÆäËüµÄÐÂÀË×ÊÔ´È´ÊÇÔÊÐí·ÃÎʵģ¬ÄÇôACL¿ÉÒÔÕâÑùд£º

¡¡¡¡acl sinapage dstdomain ok.sina.com.cn
¡¡¡¡... ...
¡¡¡¡http_access deny ok
¡¡¡¡... ...

¡¡¡¡ÓÉ´Ë¿ÉÒÔ¿´µ½£¬³ýÁËok£¬ÆäËüÈçwww.sina.com.cn¡¢news.sina.com.cn¶¼¿ÉÒÔÕý³£·ÃÎÊ¡£

¡¡¡¡ÁíÒ»ÖÖÇé¿öÊÇÕû¸öÍøÕ¾¶¼²»Ðí·ÃÎÊ£¬ÄÇôֻÐèҪд³öÕâ¸öÍøÕ¾¹²ÓеÄÓòÃû¼´¿É£¬ÅäÖÃÈçÏ£º

¡¡¡¡acl qq dstdomain .tcccent.com.cn

¡¡¡¡×¢ÒâtcccentÇ°ÃæµÄ¡°.¡±£¬ÕýÊÇËüÖ¸³öÒÔ´ËÓòÃû½áβµÄËùÓÐÖ÷»ú¶¼²»¿É·ÃÎÊ£¬·ñÔò¾ÍÖ»ÓÐtcccent.com.cnÕâһ̨Ö÷»ú²»ÄÜ·ÃÎÊ¡£

¡¡¡¡Èç¹ûÏë½ûÖ¹¶Ôij¸öIPµØÖ·µÄ·ÃÎÊ£¬Èç202.118.2.182£¬¿ÉÒÔÓÃdstÀ´¿ØÖÆ£¬´úÂëÈçÏ£º

¡¡¡¡acl badaddr dst 202.118.2.182

¡¡¡¡µ±È»£¬Õâ¸ödstÒ²¿ÉÒÔÊÇÓòÃû£¬ÓÉSquid²éѯDNS·þÎñÆ÷½«Æäת»»ÎªIP¡£

¡¡¡¡»¹ÓÐÒ»ÖֱȽϹ㷺µÄ¿ØÖÆÊÇÎļþÀàÐÍ¡£Èç¹û²»Ï£ÍûÆÕͨÓû§Í¨¹ý´úÀí·þÎñÆ÷ÏÂÔØMP3¡¢AVIµÈÎļþ£¬ÍêÈ«¿ÉÒÔ¶ÔËûÃǽøÐÐÏÞÖÆ£¬´úÂëÈçÏ£º

¡¡¡¡acl mmxfile urlpath_regex \.mp3$ \.avi$ \.exe$
¡¡¡¡http_access deny mmxfile

¡¡¡¡¿´µ½regex£¬ºÜ¶à¶ÁÕßÓ¦¸ÃÐÄÁìÉñ»á£¬ÒòΪÕâÌõÓï¾äʹÓÃÁ˱ê×¼µÄ¹æÔò±í´ïʽ£¨ÓÖ½ÐÕýÔò±í´ïʽ£©¡£Ëü½«Æ¥ÅäËùÓÐÒÔ.mp3¡¢.aviµÈ½áβµÄURLÇëÇ󣬻¹¿ÉÒÔÓÃ-i²ÎÊýºöÂÔ´óСд£¬ÀýÈçÒÔÏ´úÂ룺

¡¡¡¡acl mmxfile urlpath_regex -i \.mp3$

¡¡¡¡ÕâÑù£¬ÎÞÂÛÊÇ.mp3»¹ÊÇ.MP3¶¼»á±»¾Ü¾ø¡£µ±È»£¬-i²ÎÊýÊÊÓÃÓÚÈκοÉÄÜÐèÒªÇø·Ö´óСдµÄµØ·½£¬ÈçÇ°ÃæµÄÓòÃû¿ØÖÆ¡£

¡¡¡¡Èç¹ûÏëÈÃÆÕͨÓû§Ö»ÔÚÉÏ°àʱ¼ä¿ÉÒÔÉÏÍø£¬¶øÇÒÊÇÿÖܵŤ×÷ÈÕ£¬ÓÃSquidÓ¦µ±ÈçºÎ´¦ÀíÄØ£¿¿´¿´ÏÂÃæµÄACL¶¨Ò壺

¡¡¡¡acl worktime time MTWHF 8:30-12:00 14:00-18:00
¡¡¡¡http_access deny !worktime

¡¡¡¡Ê×Ïȶ¨ÒåÔÊÐíÉÏÍøµÄʱ¼äÊÇÿÖܹ¤×÷ÈÕ£¨ÐÇÆÚÒ»ÖÁÐÇÆÚÎ壩µÄÉÏÎçºÍÏÂÎçµÄ¹Ì¶¨Ê±¶Î£¬È»ºóÓÃhttp_access ¶¨ÒåËùÓв»ÔÚÕâ¸öʱ¼ä¶ÎÄÚµÄÇëÇó¶¼ÊDz»ÔÊÐíµÄ¡£

¡¡¡¡»òÕßΪÁ˱£Ö¤¸ß¼¶Óû§µÄ´ø¿í£¬Ï£Íûÿ¸öÓû§µÄ²¢·¢Á¬½Ó²»ÄÜÌ«¶à£¬ÒÔÃâÓ°ÏìËûÈË£¬Ò²¿ÉÒÔͨ¹ýSquid¿ØÖÆ£¬´úÂëÈçÏ£º

¡¡¡¡acl conncount maxconn 3
¡¡¡¡http_access deny conncount normal
¡¡¡¡http_access allow normal

¡¡¡¡ÕâÑù£¬ÆÕͨÓû§ÔÚij¸ö¹Ì¶¨Ê±¿ÌÖ»ÄÜͬʱ·¢ÆðÈý¸öÁ¬½Ó£¬´ÓµÚËĸö¿ªÊ¼£¬Á¬½Ó½«±»¾Ü¾ø¡£

¡¡¡¡×ÜÖ®£¬SquidµÄACLÅäÖ÷dz£Áé»î¡¢Ç¿´ó£¬¸ü¶àµÄ¿ØÖÆ·½Ê½¿ÉÒԲο¼squid.conf.default¡£
¡¡¡¡
¡¡¡¡3.×ܽá

¡¡¡¡ÏÂÃæ°ÑÕû¸ösquid.conf×ܽáһϣº

¡¡¡¡# ·þÎñÆ÷ÅäÖÃ
¡¡¡¡http_port 192.168.0.1:3128
¡¡¡¡cache_mgr start@soocol.com
¡¡¡¡cache_dir null /tmp
¡¡¡¡cache_access_log /var/squid/access.log
¡¡¡¡cache_log /var/squid/cache.log
¡¡¡¡cache_store_log /var/squid/store.log
¡¡¡¡visible_hostname No1.proxy
¡¡¡¡client_mask 255.255.255.255
¡¡¡¡httpd_accel_host virtual
¡¡¡¡httpd_accel_port 80
¡¡¡¡httpd_accel_with_proxy on
¡¡¡¡httpd_accel_user_host_header on

¡¡¡¡# Óû§·ÖÀà
¡¡¡¡acl advance arp 00:01:02:1f:2c:3e 00:01:02:3c:1a:8b ...
¡¡¡¡acl normal proxy_auth REQUIED
¡¡¡¡acl all src 0.0.0.0

¡¡¡¡# ÐÐΪ·ÖÀà
¡¡¡¡acl mmxfile urlpath_regex \.mp3$ \.avi$ \.exe$
¡¡¡¡acl conncount maxconn 3
¡¡¡¡acl worktime time MTWHF 8:30-12:00 14:00-18:00
¡¡¡¡acl sinapage dstdomain ok.sina.com.cn
¡¡¡¡acl qq dstdomain .tcccent.com.cn

¡¡¡¡# ´¦Àí
¡¡¡¡http_access allow advance
¡¡¡¡http_access deny conncount normal
¡¡¡¡http_access deny !worktime
¡¡¡¡http_access deny mmxfile
¡¡¡¡http_access deny sinapage
¡¡¡¡http_access deny qq
¡¡¡¡http_access allow normal

¡¡¡¡ÅäÖúóµÄ×´¿öÊÇ£¬advance×é¿ÉÒÔ²»ÊÜÈκÎÏÞÖƵطÃÎÊInternet£¬¶ønormal×éÔòÖ»ÄÜÔÚ¹¤×÷ʱ¼äÉÏÍø£¬¶øÇÒ²»ÄÜÏÂÔضàýÌåÎļþ£¬²»ÄÜ·ÃÎÊijЩÌض¨µÄÕ¾µã£¬¶øÇÒ·¢ËÍÇëÇó²»Äܳ¬¹ý3¸ö¡£

¡¡¡¡Í¨¹ý±¾ÎĵĽéÉÜ£¬Ëü¿ÉÒÔÁ˽âSquidµÄ»ù±¾ÄÜÁ¦¡£µ±È»£¬ËüµÄÄÜÁ¦Ô¶²»Ö¹´Ë£¬¿ÉÒÔ½¨Á¢Ç¿´óµÄ´úÀí·þÎñÆ÷ÕóÁУ¬¿ÉÒÔ°ïÖú±¾µØµÄWeb·þÎñÆ÷Ìá¸ßÐÔÄÜ£¬¿ÉÒÔÌá¸ß±¾µØÍøÂçµÄ°²È«ÐԵȡ£ÒªÏë·¢»ÓËüµÄ¹¦Ð§£¬»¹ÐèÒª½øÒ»²½¿ØÖÆ¡£
]]> 2007-10-25T23:45:37 +0800