I configured Firefox to use the proxy IP and port, and it worked, so my hypothesis is correct: for some reason, the machine where Squid is running don't send to it the incoming petitions. But anyway, the ACL don't work, so I will try to solve that problem later.
Currently I have this:
acl our_networks src 192.168.0.0/24 192.168.0.1/24 192.168.0.2/24 acl superuser src 192.168.0.5 acl blocked_sites regex_url "/etc/squid/blocked_sites" http_access allow superuser http_access deny blocked_sites http_access deny all
And all the words listed in blocked_sites are blocked, even for the 192.168.0.5 IP (the superuser ACL).
I read and read, and I can't understand what I'm doing wrong.
I had Squid working without any trouble, which filters web sites through
regex_url. But when I modified the ACL in order to grant access to some sites in determined hours, it stopped working.
The demon runs without any trouble, nevertheless, any attempt to block the access, whether just to some sites or the whole net, it's in vain. If I stop the demon, every PC from the network continues to have internet access, which makes me think that even though Squid is installed and working, the petitions from the net aren't filtered by it.
This is my
squid.conf, the only file that I have edited.
acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT # My rules acl our_networks src 192.168.1.0/24 192.168.2.0/24 192.168.0.0/24 acl laboratorio src 192.168.0.101-192.168.0.130 acl acceso_completo src "/etc/squid/acceso_completo" acl almuerzo time 13:15-14:00 acl tarde time 4:30-19:00 acl sitios_bloqueados url_regex -i "/etc/squid/sitios_bloqueados" # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS http_access allow our_networks !sitios_bloqueados http_access deny all #Allow ICP queries from everyone icp_access allow all # Squid normally listens to port 3128 http_port 3128 transparent #We recommend you to use at least the following line. hierarchy_stoplist cgi-bin ? #We recommend you to use the following two lines. acl QUERY urlpath_regex cgi-bin \? cache deny QUERY #Suggested default: refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 0 20% 4320 # Apache to signal ETag correctly on such responses acl apache rep_header Server ^Apache http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow all !sitios_bloqueados http_access allow localhost http_access deny all broken_vary_encoding allow apache