Only msn,yahoo & browsing

[onezeroinc]

Dear Fellows, Salam el kum,

I just wana give access to msn msgnr, yahoo msngr and browsing to my all clients. what is the best configuration for this.

my squid.conf is below:

acl myclients src 192.168.100.0/255.255.255.0
http_access allow myclients

best regards
onezeroinc

[Qadri-409]

get used to the following link you will get solution in few minutes


http://www.linuxpakistan.net/forum2x/se ... de=results

take care

[onezeroinc]

very funny reply.....

I already searched linuxpakistan.net for my required question. but i am unable to find my answer. thats why i post my problem.

hope you understand now

best regards
onezeroinc.

[Qadri-409]

you don't need any other squid.conf ...just make this squid box gateway of your WS and port forward the msn & yahoo over the firewall.. ....firewall settings depends upon the distro which you are using .

take care

[onezeroinc]

My server is FEDORA core 2 and built in squid running on it. I am not running transparent proxy on it. My question is, I just want to give browsing, msn and yahoo messenger access to all of mine clients. thats it.

Do u understand now?, ok i will tell u in details.

only MSIExplorer.exe
only Yahoo.exe
only msn.exe

not any other stuff, all blocked by squid.conf, how?

What i think, i have to enable it from mime.conf. but i dont know how?

or

i have to enable it in squid.conf with the help of regex_url or req_mime_type, but i dont know how?

please help me, i am very much thankful to u all.

best regards
onezeroinc.

[kbukhari]

Acl Type: browser

Description:
Regular expression pattern matching on the request's user-agent header
Usage: acl aclname browser pattern

letsee
acl aclname browser iexplorer.exe ypager.exe msngr.exe
This refers to the requests, which are coming from the browsers who have "iexplorer.exe ypager.exe msngr.exe" keyword in the user-agent header.

asl myagent browser iexplorer
http_access allow myagnet
http-access deny all

[onezeroinc]

thanks but
when i tried this

acl all src 0.0.0.0/0.0.0.0
acl mynetwork src 192.168.100.0/255.255.255.0
acl myagent browser [-i] IEXPLORE.EXE
http_access allow mynetwork myagent
http_access deny all

all of my users access browsing msn and yahoo messenger and some other stuff also which i dont want they access.

but when i remore [-i] in this line
acl myagent browser [-i] IEXPLORE.EXE

my users cant access any thing. access denied error come in browser and all of msnger not working. means all internet activity jammed.

please please please solve my problem.

waiting for best idea about this.

best regards
onezeroinc.

[LinuxFreaK]

Dear onezeroinc,
Salam,

Try below configuration.

Code: Select all

acl allowmsn src 192.168.0.10/255.255.255.255
acl msn req_mime_type -i ^application/x-msn-messenger$
http_access allow allowmsn msn
http_access deny msn

Best Regards.

[onezeroinc]

ok i will try and let u inform

but what about yahoo messenger and internet explorer browser?

waiting...

[onezeroinc]

no. result is in NEGETIVE

all browsing stoped. no msn. no yahoo and other conected. all dead. browser said 'ACCESS DENIED'

still my problem is not solved.

kiya karoon may ab

onezeroinc.

[LinuxFreaK]

Dear onezeroinc,
Salam,

Read about MASQUERADING

And Read again your Question which you have posted here

Best Regards.

[onezeroinc]

my question is quite simple.

I just wana give access to msn msgnr, yahoo msngr and browsing to my all clients. what is the best configuration for this.

regards
onezeroinc

[onezeroinc]

dear fellows, aoa,

still i am waiting for my solution.
i repeat...... i repeat.....

i just wanto give access my clients to only use internet explorer for browsing,yahoo messenger and msn messenger for chatting. thats it.

with out MASQUERADE and with out iptables and others.

best regards
onezero inc.

[LinuxFreaK]

Dear onezeroinc,
Salam,

i just wanto give access my clients to only use internet explorer for browsing,yahoo messenger and msn messenger for chatting. thats it. with out MASQUERADE and with out iptables and others.

We at LinuxPakistan working as Volunteer. We are not paid Employee of LinuxPakistan. As well as LinuxPakistan by it self is not Paid by Government of Pakistan. So, you should have adicates how to ask Questions.

P.S: if this will hurt some one. I am not saying this because i have maximum number of post here @ LinuxPakistan. People think i am always available for them they added me in their MSN/Yahoo/Gmail etc and asking me questions. I come online from Office i am not free all the time. I do not have habbit to block some one. So from now NO CHAT SUPPORT. If you have problem you can post it at LinuxPakistan so it will help other newbies with same problem.

OneZeroInc, For your Question i think you can not do this without MASQUERADING + Iptables. If some one knows the way he is talking about please help him.

Best Regards.

[onezeroinc]

Dear LinuxFreak, aoa,

Please accept deeply sorry from my heart. I really upset after ready your post. Man, you are doing the best job. Next time i will NOT disturb you on msn. Thats is my words.

Best regards
Onezero Inc.