[proxy] 用squid＋iptables做透明代理无法阻止客户端下载mp3问题

[weixin_38056491]

http://bbs.chinaunix.net/forum/viewtopic.php?show_type=&p=3347250#3347250

透明代理成功，里面有这样两行：

acl QUERY urlpath_regex -i cgi-bin \? \.exe$ \.zip$ \.mp3$ \.mp2$ \.rm$ \.avi$
no_cache deny QUERY
测试阻止客户端下载mp3等文件，又加入这样两行：

acl mmxfile urlpath_regex -i \.mp3$ \.avi$
http_access deny mmxfile
重启squid，可是客户端仍然可以下载mp3，不过只下载了前面一部分就停了，已经下载的一部分可以播放，不知道是squid的问题还是网络的问题。

[root@amd squid]# tail access.log
1109905894.611  11565 192.168.30.2 TCP_MISS/302 502 GET http://www.chinaunix.net/images/ - DIRECT/61.135.136.122 text/html
1109905895.021    410 192.168.30.2 TCP_MISS/304 197 GET http://www.chinaunix.net/help.html - DIRECT/61.135.136.122 -
1109905896.332  12184 192.168.30.2 TCP_MISS/304 197 GET http://www.chinaunix.net/help.html - DIRECT/61.135.136.122 -
1109905921.282  30003 192.168.30.2 TCP_MISS/206 306468 GET http://www.joyhero.net/down/music/barn/0052.mp3 - DIRECT/202.102.246.240 audio/mpeg
1109905957.105   2134 192.168.30.2 TCP_MISS/302 664 GET http://autoupdate.windowsmedia.com/update/update.asp? - DIRECT/207.46.248.96 text/html
1109905967.471  10365 192.168.30.2 TCP_MISS/200 10689 GET http://autoupdate.windowsmedia.com/update/CHS/control.xml - DIRECT/207.46.248.96 text/xml
1109905982.264  29696 192.168.30.2 TCP_MISS/200 354348 GET http://www.joyhero.net/down/music/barn/0012.mp3 - DIRECT/202.102.246.240 audio/mpeg
1109906054.122   1155 192.168.30.2 TCP_MISS/304 202 GET http://www.joyhero.net/down/music/barn/0052.mp3 - DIRECT/202.102.246.240 -
1109906225.905   3172 192.168.30.2 TCP_MISS/200 709 GET http://rrr.dkkdk.com/ - DIRECT/81.4.66.75 text/html
1109906227.116   1212 192.168.30.2 TCP_MISS/200 7547 GET http://rrr.dkkdk.com/dkkdk.com.gif - DIRECT/81.4.66.75 image/gif
1109906247.411    505 192.168.30.2 TCP_MISS/302 693 GET http://auto.search.msn.com/response.asp? - DIRECT/220.90.198.41 text/html
1109906448.572    794 192.168.30.2 TCP_MISS/304 196 GET http://www.chinaunix.net/indexlogin.js - DIRECT/61.135.136.122 -
1109906448.982    410 192.168.30.2 TCP_MISS/304 195 GET http://www.chinaunix.net/forum/templates/subSilver/images/icon_mini_search.gif - DIRECT/61.135.136.122 -
还有就是我输入一些不存在的网址，发现浏览器给出的提示不是squid的提示，而是微软的：无法显示网页、找不到服务器，为什么啊？

我已经在squid.conf里面增加了：

error_directory /usr/share/squid/errors/Simplify_Chinese