SquidGuard

MDK-10. пёя│я┌п╟п╫п╬п╡п╩п╣п╫ squid. п▓я│я▒ я─п╟п╠п╬я┌п╟п╣я┌. п÷п╬я│я┌п╟п╡п╦п╩ squidGuard. п▓ 
/etc/squid п©п╬я▐п╡п╦п╩я│я▐ я└п╟п╧п╩ squidGuard.conf.sample. п╞ п╣пЁп╬ п©п╣я─п╣п╦п╪п╣п╫п╬п╡п╟п╩ п╡ 
squidGuard.conf. п▓ я█я┌п╬п╪ я└п╟п╧п╩п╣ п╦п╪п╣я▌я┌я│я▐ я─п╟п╥п╫я▀п╣ пЁя─я┐п©п©я▀ п©п╬п╩я▄п╥п╬п╡п╟я┌п╣п╩п╣п╧, п╡ я┌п╬п╪ 
я┤п╦я│п╩п╣ п╦  privilegedsource
 # SOURCE ADDRESSES:
src privilegedsource {
    iplist    privilegedsource/ips
}
п п╟п╨ я▐ п©п╬п╫п╦п╪п╟я▌, ip я┤п╩п╣п╫п╬п╡ пЁя─я┐п©п©я▀ п╫п╟п╢п╬ п©я─п╬п©п╦я│п╟я┌я▄ п╡ iplist, п╨п╬я┌п╬я─я▀п╧ 
п╫п╟я┘п╬п╢п╦я┌я│я▐ п╡ /usr/share/squidGuard-1.2.0/db/privilegesource/ips я┤я┌п╬ я▐ п╦ 
я│п╢п╣п╩п╟п╩. п■п╟п╩п╣п╣ п╢п╩я▐ я█я┌п╬п╧ пЁя─я┐п©п©я▀ п╡  /etc/squid/squidGuard.conf п©я─п╬п©п╦я│п╟п╩ 
п©я─п╟п╡п╦п╩п╟ я└п╦п╩я▄я┌я─п╟я├п╦п╦
# ACLs
acl {
    privilegedsource {
        pass !advertising !ads !porn !banneddestination all
        redirect 
http://127.0.0.1/cgi-bin/squidGuard.cgi?clientaddr=%a&srcclass=%s&targetclass=%t&url=%u

    }
п÷п╬я┌п╬п╪ п╡ /etc/squid/squid.conf п╡ п╨п╬п╫я├п╣ я└п╟п╧п╩п╟ п©я─п╬п©п╦я│п╟п╩ п╡п╬я┌ я█я┌п╬
redirect_program /usr/bin/squidGuard
redirect_children 3
redirector_bypass on
п÷п╬я┌п╬п╪ п©п╣я─п╣п╥п╟п©я┐я│я┌п╦п╩ squid
service squid restart
п╓п╦п╩я▄я┌я─п╟я├п╦я▐ п╡я─п╬п╢п╣ п©п╬я▐п╡п╦п╩п╟я│я▄, п╫п╬ п╡я│я▒ я─п╟п╡п╫п╬ п╪п╫п╬пЁп╬ п╠п╟п╫п╣я─п╬п╡ п╦ я─п╣п╨п╩п╟п╪я▀ 
п╬я│я┌п╟п╩п╬я│я▄, п©п╬я█я┌п╬п╪я┐ п╥п╟я│п╬п╪п╫п╣п╡п╟п╩я│я▐ п╡я│я▒ п╩п╦ п©я─п╟п╡п╦п╩я▄п╫п╬ я│п╢п╣п╩п╟п╩. п■п╩я▐ п©я─п╬п╡п╣я─п╨п╦ 
я─п╣я┬п╦п╩ п╥п╟п╧я┌п╦ п╫п╟ п╨п╟п╨п╬п╧ п╫п╦п╠я┐п╢я▄ п©п╬я─п╫я┐я┬п╫я▀п╧ я│п╟п╧я┌, п╫п╬ squidGuard п╢п╬я│я┌я┐п© 
п╥п╟п©я─п╣я┌п╦п╩. п≈п╫п╟я┤п╦я┌ п╡я─п╬п╢п╣ я─п╟п╠п╬я┌п╟п╣я┌. п═п╣я┬п╦п╩ п╢п╬я▄п╟п╡п╦я┌я▄ п╟п╢я─п╣я│п╬п╡ п╡ blacklist, 
я│п╨п╟я┤п╟п╩ п╣пЁп╬ п╡п╬я┌ п╬я┌я│я▌п╢п╟
http://ftp.teledanmark.no/pub/www/proxy/squidGuard/contrib/blacklists.tar.gz
п═п╟я│п©п╟п╨п╬п╡п╟п╩, п©п╬п╪п╣п╫я▐п╩ п╡п╩п╟п╢п╣п╩я▄я├п╟, пЁя─я┐п©п©я┐ п╫п╟ squid, п╟ п©я─п╟п╡п╟ п╫п╟ 755, п©п╬я┌п╬п╪я┐ 
я┤я┌п╬ я┐ я─п╟п╫п╣п╣ я┐я│я┌п╟п╫п╬п╡п╩п╣п╫п╫я▀я┘ я└п╟п╧п╩п╬п╡ п╦ п©п╟п©п╬п╨ п╫п╟я┘п╬п╢я▐я┴п╦я┘я│я▐ п╡  
/usr/share/squidGuard-1.2.0/db п╠я▀п╩п╦ я┌п╟п╨п╦п╣ п╤п╣, п╦ я│п╨п╬п©п╦я─п╬п╡п╟п╩ п╡ 
я│п╬п╬я┌п╡п╣я┌я│я┌п╡я┐я▌я┴п╦п╣ п╢п╦я─п╣п╨я┌п╬я─п╦п╦. п║п╫п╬п╡п╟ service squid restart. п≈п╟я┘п╬п╤я┐ п╡ п╦п╫п╣я┌, 
п╫п╬ п╡ я└п╦п╩я▄я┌я─п╟я├п╦п╦ п╫п╟ п©п╣я─п╡я▀п╧ п╡п╥пЁп╩я▐п╢ п╫п╦ я┤п╣пЁп╬ п╫п╣ п╦п╥п╪п╣п╫п╦п╩п╬я│я▄. п²п╟я┬я▒п╩ п╡ п╦п╫п╣я┌п╣ 
я│я┌п╟я┌я▄я▌ п╬п╠ я┐я│я┌п╟п╫п╬п╡п╨п╣ п╦ п╫п╟я│я┌я─п╬п╧п╨п╣ squidGuard. п╒п╟п╪ п╫п╟п©п╦я│п╟п╫п╬ я┌п╬п╤п╣, я┤я┌п╬ п╦ я▐ 
я│п╢п╣п╩п╟п╩, я┌п╬п╩я▄п╨п╬ я┐п╨п╟п╥п╟п╫п╬, я┤я┌п╬
"п∙я│п╩п╦ п╡я▀ п╡п╫п╣я│п╩п╦ п╦п╥п╪п╣п╫п╣п╫п╦я▐ п╡ я└п╟п╧п╩ domains п╦п╩п╦ urls, я┌п╬ п╢п╩я▐ п╡я│я┌я┐п©п╩п╣п╫п╦я▐
   п╦п╥п╪п╣п╫п╣п╫п╦п╧ п╡ я│п╦п╩я┐ п╡п╟п╪ п╫п╣п╬п╠я┘п╬п╢п╦п╪п╬ п╡я▀п©п╬п╩п╫п╦я┌я▄ я│п╩п╣п╢я┐я▌я┴я┐я▌ п╨п╬п╪п╟п╫п╢я┐  
   /usr/bin/squidGuard -C all  п╢п╩я▐ я│п╬п╥п╢п╟п╫п╦я▐ я└п╟п╧п╩п╬п╡ domains.db п╦ urls.db.
   п∙я│п╩п╦ п╩п╣п╫я▄, я┌п╬ я┐п╢п╟п╩п╦я┌п╣ п╡я│п╣ я└п╟п╧п╩я▀ *.db, п╦ squidGuard п╟п╡я┌п╬п╪п╟я┌п╦я┤п╣я│п╨п╦ п╠я┐п╢п╣я┌
   п©я─п╣п╬п╠я─п╟п╥п╬п╡я▀п╡п╟я┌я▄  п╦я┘ п©я─п╦ п╥п╟пЁя─я┐п╥п╨п╣ (п╥п╟п╪п╣п╢п╩я▐п╣я┌ п╥п╟пЁя─я┐п╥п╨я┐)."
п╖я┌п╬ я▐ п╦ я│п╢п╣п╩п╟п╩
 /usr/bin/squidGuard -C all
п▓я│я▒ п©я─п╬я┬п╩п╬ я┐я│п©п╣я┬п╫п╬, п╫п╬ я┌п╣п©п╣я─я▄ п╡ п╦п╫п╣я┌п╣ п╪п╟п╩п╬ п╨я┐п╢п╟ я┐п╢п╟я▒я┌я│я▐ п╥п╟п╧я┌п╦. п÷я─п╦я┤я▒п╪ п╫п╣ 
п©п╬я▐п╡п╩я▐п╣я┌я│я▐ п╬п╨п╫п╬ п╠п╩п╬п╨п╦я─п╬п╡п╨п╦, п╟ п©я─п╬я│я┌п╬ "п╬я│п╩п╣п©п╦я┌п╣п╩я▄п╫п╬ п╠п╣п╩я▀п╧ я█п╨я─п╟п╫" п²п╟ 
п╫п╣п╨п╬я┌п╬я─я▀я┘ я│п╟п╧я┌п╟я┘ п©п╬я▐п╡п╩я▐я▌я┌я│я▐ п©я─п╟п╡п╢п╟ п╨п╬п╧ п╨п╟п╨п╦п╣ п╨п╟я─я┌п╦п╫п╨п╦ я│ п╬п╠я─я▀п╡п╨п╟п╪п╦ я┌п╣п╨я│я┌п╟ 
п╦ я┌п╬ п╪п╣я│я┌п╟п╪п╦. п║п╬п╥п╢п╟я▒я┌я│я▐ я┌п╟п╨п╬п╣ п╡п©п╣я┤п╟я┌п╩п╣п╫п╦п╣, я┤я┌п╬ я─п╣п╥п╟я┌я▄ я│я┌п╟п╩ п╡я│я▒ п©п╬п╢я─я▐п╢, 
я┘п╬я┌я▐ п©я─п╟п╡п╦п╩п╟ я└п╦п╩я▄я┌я─п╟я├п╦п╦ п╢п╩я▐ я│п╡п╬п╣п╧ пЁя─я┐п©п©я▀ я▐ п╫п╣ п╪п╣п╫я▐п╩. п╖я┌п╬ я▐ я│п╢п╣п╩п╟п╩ п╫п╣ 
п©я─п╟п╡п╦п╩я▄п╫п╬?