[squid-users] squid 3.1 + tproxy + iptables 1.4.3 -url filter not working

 hi all
 i setup my squid proxy follow this url
 kernel version & iptables all match Minimum Requirements
 http://wiki.squid-cache.org/Features/Tproxy4#Feature:_TPROXY_version_4.1.2B-_Support
 some diffenernt
 ip route add default via isp'gateway dev ppp0 table 100

 my squid.conf
 #Recommended minimum configuration:
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network

acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

#url filter
acl badDomain dstdomain yahoo.com
acl keyword url_regex -i plurk

http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports

http_access allow localnet
http_access allow myDomain

# And finally deny all other access to this proxy
http_access deny all

icp_access allow localnet
icp_access deny all

#Allow HTCP queries from local networks only
htcp_access allow localnet
htcp_access deny all

visible_hostname testlab

# Squid normally listens to port 3128
#http_port 3128 transparent
http_port 3129 tproxy
#http_port 3128 tproxy transparent
cache deny all
access_log /usr/local/squid/var/logs/access.log squid
#cache_dir null /tmp
cache_store_log none
cache_effective_user squid
cache_effective_group squid

when i start my squid proxy
the traffic is via ppp0 to internet
but url filter rule is notworking !!!!!!!!!

this squid.conf is copy from squid 3.0
i use squid 3.1 because i want ctrol the traffic out going multi wan

please give me any advice
thank a lot
Received on Mon Mar 08 2010 - 11:56:52 MST