请教高手squid配置问题

ballatong 2008-01-15 10:15:03

请教高手squid配置问题
我的系统是debian 4.0安装了两块网卡
Eth0 固定IP 10.198.12.18/22 网关没有设置这个IP 不能上 Internet
Eth1 DHCP IP 范围 192.168.0.2-100都有可能网关192.168.0.1 也是DHCP获得的此IP
可上Internet,
现在我想把这台机器作squid代理，这样我的其他10.198.12.0 /22网段的机器就可以代理出去，不知道这样的想法是否可行：下面是我的squid.conf配置
，我在客户机器上配代理地址10.198.12.18 端口3128 , 但是这样做后我的客户机器还是不能上网，请高手指点
visible_hostname debian
http_port 3128

cache_mem 64 MB
cache_swap_low 512 MB
cache_swap_high 1024MB
maximum_object_size 4096 KB

access_log /var/log/squid/access.log squid

hosts_file /etc/hosts

acl advance src 10.198.12.0/22
acl business_hour time M T W H F 00:00-23:59
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow advance business_hour
http_access allow advance all
http_access allow advance Safe_ports

...全文