opa.. faço da porta 80 para 3128..o squid está normal...se e negar um site para o usuário aparece a página html de erro....a eth0 é a interface que tem IP válido para a internet..tenho essas regras no iptables:
iptables -A POSTROUTING --src $IP_INTERNO/$INTMASK -o $IF_EXTERNO -j MASQUERADE -t nat # Mascarar trafego de rede interna para ip externo
iptables -t nat -A POSTROUTING -o $IF_EXTERNO -j MASQUERADE
############### REDIRECIONAR PORTA PARA 3128 ###########################
iptables -t nat -A PREROUTING -i $IF_INTERNO -p tcp --dport 80 -j REDIRECT --to-port 3128 #redirecionar www da porta 80 para 3128 proxy
iptables -A INPUT -i $IF_INTERNO --dst $IP_INTERNO/255.255.255.255 -p tcp --dport 3128 -j ACCEPT # acesso interno ao Proxy aceitar os outros na porta 3128
onde
$IF_INTERNO = interface interna
$IF_EXTERNO = interface externa
$IP_INTERNO = ip interno
$IP_EXTERNO = ip externo
$INTMASK = mascara interna
o controle de banda não vai funcionar? e o controle de uploda tb não vai funcionar? se o cache full funcionar da forma que vc passou acima..qual seria a solução para eu fazer o QoS para separar o 1mb de link em 2x512(metade internet com cache full e metade servidor asterisk voip??)
alterei a linha que vc pediu para ficar 1:1 e olha a reposta do comando abaixo:
debian:/home/novaf# tc -s -d class show dev eth1
class htb 1:10 parent 1:1 leaf 10: prio 1 quantum 6400 rate 512000bit ceil 512000bit burst 1599b/8 mpu 0b overhead 0b cburst 1599b/8 mpu 0b overhead 0b level 0
Sent 9187 bytes 22 pkt (dropped 0, overlimits 0 requeues 0)
rate 1864bit 1pps backlog 0b 0p requeues 0
lended: 22 borrowed: 0 giants: 0
tokens: 17090 ctokens: 17090
class htb 1:1 root rate 10000Kbit ceil 10000Kbit burst 1600b/8 mpu 0b overhead 0b cburst 1600b/8 mpu 0b overhead 0b level 7
Sent 9271 bytes 24 pkt (dropped 0, overlimits 0 requeues 0)
rate 1880bit 1pps backlog 0b 0p requeues 0
lended: 0 borrowed: 0 giants: 0
tokens: 875 ctokens: 875
class htb 1:20 parent 1:1 leaf 20: prio 2 quantum 1250 rate 100000bit ceil 200000bit burst 1599b/8 mpu 0b overhead 0b cburst 1599b/8 mpu 0b overhead 0b level 0
Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
lended: 0 borrowed: 0 giants: 0
tokens: 124999 ctokens: 62499
class htb 1:30 parent 1:1 leaf 30: prio 3 quantum 3125 rate 250000bit ceil 512000bit burst 1600b/8 mpu 0b overhead 0b cburst 1599b/8 mpu 0b overhead 0b level 0
Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
lended: 0 borrowed: 0 giants: 0
tokens: 50000 ctokens: 24414
class htb 1:40 parent 1:1 leaf 40: prio 4 quantum 1600 rate 128000bit ceil 300000bit burst 1599b/8 mpu 0b overhead 0b cburst 1599b/8 mpu 0b overhead 0b level 0
Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
lended: 0 borrowed: 0 giants: 0
tokens: 97656 ctokens: 41666
class htb 1:50 parent 1:1 leaf 50: prio 5 quantum 1600 rate 128000bit ceil 400000bit burst 1599b/8 mpu 0b overhead 0b cburst 1599b/8 mpu 0b overhead 0b level 0
Sent 84 bytes 2 pkt (dropped 0, overlimits 0 requeues 0)
rate 16bit 0pps backlog 0b 0p requeues 0
lended: 2 borrowed: 0 giants: 0
tokens: 94727 ctokens: 30312
class htb 1:60 root leaf 60: prio 1 quantum 62500 rate 5000Kbit ceil 5000Kbit burst 1600b/8 mpu 0b overhead 0b cburst 1600b/8 mpu 0b overhead 0b level 0
Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
lended: 0 borrowed: 0 giants: 0
tokens: 2500 ctokens: 2500
vou testar as dicas comentando as linhas amanhã e dou um retorno aqui para vc...