Você está usando proxy transparente ???
se sim ... verifica se o redirecionamento à porta do squid no firewall está correto ...
Falow ...
Versão Imprimível
Kara nao tem como ser as acls pq eu so criei uma as outras q tem são as recomendadas.
o redirecionamento ta assim:
/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128
meu squid:
http_port 3128
# TAG: no_cache
# A list of ACL elements which, if matched, cause the request to
# not be satisfied from the cache and the reply to not be cached.
# In other words, use this to force certain objects to never be cached.
#
# You must use the word 'DENY' to indicate the ACL names which should
# NOT be cached.
#
#We recommend you to use the following two lines.
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 64 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 140960 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 256 KB
cache_dir ufs /var/spool/squid 2000 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
#auth_param basic casesensitive off
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 #SWAT
acl CONNECT method CONNECT
# http_access deny all
#
#Recommended minimum configuration:
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
acl proibidos dstdom_regex "/etc/squid/proibidos/block.txt"
http_access deny proibidos
acl our_networks src 172.19.123.0/24
http_access allow our_networks
# And finally deny all other access to this proxy
http_access allow localhost
http_access deny all
# http_reply_access allow all
http_reply_access allow all
icp_access allow all
#proxy transparente
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
# TAG: httpd_accel_no_pmtu_disc on|off
# In many setups of transparently intercepting proxies Path-MTU
# discovery can not work on traffic towards the clients. This is
# the case when the intercepting device does not fully track
# connections and fails to forward ICMP must fragment messages
# to the cache server.
#
# If you have such setup and experience that certain clients
# sporadically hang or never complete requests set this to on.
#
# httpd_accel_no_pmtu_disc off
error_directory /usr/share/squid/errors/Portuguese
coredump_dir /var/spool/squid
visible_hostname teste
eu digito o comando squid -k aparece q ele ta rodando..
mais ai eu vou ver o log no var/log/squid/access.log e so aparece isso:
1169109046.187 7 69.159.116.26 TCP_DENIED/403 1323 GET http://200.174.28.195/ - NONE/- text/html
acho q o problema e esse.. alguem ja passou por isso? =[
Kra faz o seguinte, da esse comando:
squid -d9
vai ser criado um arquivo chamado squid.run neste arquivo tem o motivo do problema, posta ele ai pra gente...
Kara eu digitei esse comando aki e nada oh.. ele trava.. e não gera nada =[
Amigo, vc pode postar o arquivo txt onde estao os bloqueados? Talvez possa ser a forma como vc declarou.