<div dir="ltr">FYI access.log<div><br></div><div><div>1433958220.321 227 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4370">wevhbpyvhx.spotilocal.com:4370</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div><div>1433958220.421 2 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4371">wevhbpyvhx.spotilocal.com:4371</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div><div>1433958220.595 3 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4372">wevhbpyvhx.spotilocal.com:4372</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div><div>1433958220.664 2 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4373">wevhbpyvhx.spotilocal.com:4373</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div><div>1433958220.795 2 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4374">wevhbpyvhx.spotilocal.com:4374</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div><div>1433958220.812 1 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4375">wevhbpyvhx.spotilocal.com:4375</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div><div>1433958220.824 2 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4376">wevhbpyvhx.spotilocal.com:4376</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div><div>1433958220.838 1 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4377">wevhbpyvhx.spotilocal.com:4377</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div><div>1433958220.853 1 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4378">wevhbpyvhx.spotilocal.com:4378</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div><div>1433958220.877 3 192.168.27.81 TCP_MISS/504 0 CONNECT <a href="http://wevhbpyvhx.spotilocal.com:4379">wevhbpyvhx.spotilocal.com:4379</a> proxyvipstr DIRECT/<a href="http://127.0.0.1">127.0.0.1</a> -</div></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2015-06-10 14:39 GMT-03:00 Jonathan Filogna <span dir="ltr"><<a href="mailto:jonathan.filogna@tasso.com.ar" target="_blank">jonathan.filogna@tasso.com.ar</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi all, it's me again, just a simple question<div><br></div><div>I've configured an squid 2.7 with ntlm auth and i want to let some AD users to listen spotify</div><div><br></div><div>My problem is that spotify streaming is being blocked by squid to this group and idk why. Maybe another syntax problem?</div><div><br></div><div>here's my squid.conf</div><div><br></div><div><div><br></div><div>###########################SQUID.CONF</div><div><br></div><div>visible_hostname prana</div><div><br></div><div>auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 5</div><div>auth_param ntlm keep_alive on</div><div><br></div><div><br></div><div>external_acl_type ntlm_group ttl=3600 children=100 %LOGIN /usr/lib/squid/<a href="http://wbinfo_group.pl" target="_blank">wbinfo_group.pl</a></div><div><br></div><div><br></div><div>acl porno url_regex -i "/etc/squid/listas/porno.lst"</div><div>acl permitidos dstdomain -i "/etc/squid/listas/permitidos.lst"</div><div>acl directo url_regex -i "/etc/squid/listas/direct.lst"</div><div>acl vidyaud rep_mime_type -i "/etc/squid/listas/blockstr.lst"</div><div>acl useragent browser -i "/etc/squid/blockejec/browser.lst"</div><div><div>acl blockstr req_mime_type -i "/etc/squid/blockejec/blocstreaming.lst"</div><div>acl blockejec url_regex -i "/etc/squid/blockejec/blockejec.lst"</div><div>acl audyvid req_mime_type -i "/etc/squid/listas/blockstr.lst"</div><div>acl blockstr2 rep_mime_type -i "/etc/squid/blockejec/blocstreaming.lst"</div><div>acl destinolimitado dstdomain -i "/etc/squid/listas/limitado.lst"</div></div><div><br></div><div><div>acl all src all</div><div>acl CONNECT method CONNECT</div><div>acl manager proto cache_object<br></div><div>acl webserver src <a href="http://192.168.8.121/255.255.255.255" target="_blank">192.168.8.121/255.255.255.255</a></div><div>http_access allow manager webserver</div><div>http_reply_access allow manager webserver</div><div>http_access deny manager</div></div><div><br></div><div><div>http_access deny porno all</div><div>http_reply_access deny porno all</div><div>acl uservipstr external ntlm_group "/etc/squid/listas/uservipstr.lst"<br></div><div><br></div><div>http_access deny blockejec uservipstr</div><div><br></div><div>http_access allow uservipstr</div><div>http_reply_access allow uservipstr<br></div><div><br></div><div>http_access deny blockstr !uservipstr all</div><div>http_reply_access deny blockstr !uservipstr all</div><div>http_access deny blockstr2 !uservipstr all</div><div>http_reply_access deny blockstr2 !uservipstr all</div><div>http_access deny audyvid !uservipstr all</div><div>http_access deny vidyaud !uservipstr all</div><div>http_reply_access deny audyvid !uservipstr all</div><div>http_reply_access deny vidyaud !uservipstr all</div></div><div><br></div><div><div>acl SSL_ports port 443 # https</div><div>acl SSL_ports port 563 # snews</div><div>acl SSL_ports port 873 # rsync</div><div>acl Safe_ports port 80 # http</div><div>acl Safe_ports port 21 # ftp</div><div>acl Safe_ports port 443 # https</div><div>acl Safe_ports port 70 # gopher</div><div>acl Safe_ports port 210 # wais</div><div>acl Safe_ports port 1025-65535 # unregistered ports</div><div>acl Safe_ports port 280 # http-mgmt</div><div>acl Safe_ports port 488 # gss-http</div><div>acl Safe_ports port 591 # filemaker</div><div>acl Safe_ports port 777 # multiling http</div><div>acl Safe_ports port 631 # cups</div><div>acl Safe_ports port 873 # rsync</div></div><div>acl Safe_ports port 901 # SWAT<br></div><div><div>acl Safe_ports port 78 69 #Spotify</div></div><div><br></div><div><br></div><div><div><br></div><div># Deny requests to unknown ports</div><div>#http_access allow Safe_ports</div><div>http_access deny !Safe_ports</div><div># Deny CONNECT to other than SSL ports</div><div>http_access deny CONNECT !SSL_ports</div><div><br></div><div>acl ntlm proxy_auth REQUIRED</div><div><div>http_access allow ntlm</div><div>http_reply_access allow ntlm</div></div></div><div><div>http_access deny all</div><div>http_reply_access deny all</div></div><div><br></div><div>###########</div><div><br></div><div>thank you all</div><span class="HOEnZb"><font color="#888888"><div><br></div>-- <br><div><div dir="ltr"><div><div dir="ltr">Jonathan Filogna<br></div><div>It Senior<br></div><div>Tasso SRL<br>4702 1910<br></div></div></div></div>
</font></span></div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr">Jonathan Filogna<br></div><div>It Senior<br></div><div>Tasso SRL<br>4702 1910<br></div></div></div></div>
</div>