+ Responder ao Tópico



  1. #1

    Question Squid não Conecta maquina Cliente

    Ola amigos..

    tenho uma rede com 20 pcs .
    estou tendo problema com a configuração do SQUID
    segue abaixo o SQUID.CONF q uso

    ##########################

    http_port 3129
    visible_hostname servidorx-marimba

    cache_mem 64 MB
    maximum_object_size_in_memory 64 KB
    maximum_object_size 750 MB
    minimum_object_size 0 KB
    cache_swap_low 90
    cache_swap_high 95
    cache_dir ufs /var/spool/squid 2048 16 256
    cache_access_log /var/log/squid/access.log
    refresh_pattern ^ftp: 15 20% 2280
    refresh_pattern ^gopher: 15 0% 2280
    refresh_pattern . 15 20% 2280

    acl all src 0.0.0.0/0.0.0.0
    acl manager proto cache_object
    acl localhost src 127.0.0.1/255.255.255.255
    acl SSL_ports port 443 563
    acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 1025-65535
    acl purge method PURGE
    acl CONNECT method CONNECT

    http_access allow manager localhost
    http_access deny manager
    http_access allow purge localhost
    http_access deny purge
    http_access deny !Safe_ports
    http_access deny CONNECT !SSL_ports

    acl redelocal src 192.168.0.0/24
    http_access allow localhost
    http_access allow redelocal
    http_access deny all

    aparentemente tudo OK ...

    considerações:

    =>IP do eth0 (rede local) é 192.168.0.1
    =>as maquinas da rede não estão abrindo paginas de internet

    alguma ideia de onde errei?!

  2. #2

    Padrão RE: Squid não Conecta maquina Cliente

    Está usando Proxy transparente?

    faça os seguintes passos para começarmos a isolar os problemas.

    1 -
    # ps -aux |grep squid

    2 -
    # tail -f /var/log/messages /var/log/squid/access.log

    Posta aqui a saída desses comandos.

    Sds.
    Última edição por rospyn; 24-01-2009 às 13:06.



  3. #3

    Arrow

    [email protected]:/home/servidorx# ps -aux |grep squid
    Warning: bad ps syntax, perhaps a bogus '-'? See procps - Frequently Asked Questions (FAQ)
    root 7812 0.0 0.1 4972 652 ? Ss 13:24 0:00 /usr/sbin/squid -D -YC
    proxy 7814 0.2 0.9 7528 4828 ? S 13:24 0:00 (squid) -D -YC
    root 7940 0.0 0.1 3252 808 pts/1 S+ 13:25 0:00 grep squid
    [email protected]:/home/servidorx# tail -f /var/log/messages /var/log/squid/access.log
    ==> /var/log/messages <==
    Jan 24 12:39:02 servidorx-marimba pulseaudio[4874]: main.c: setrlimit(RLIMIT_RTPRIO, (9, 9)) failed: Operação não permitida
    Jan 24 12:45:06 servidorx-marimba kernel: [ 644.301595] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
    Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308478] CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Plase use
    Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308527] nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or
    Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308534] sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
    Jan 24 12:55:11 servidorx-marimba -- MARK --
    Jan 24 13:15:11 servidorx-marimba -- MARK --
    Jan 24 13:24:11 servidorx-marimba squid[7782]: Squid Parent: child process 7785 started
    Jan 24 13:24:22 servidorx-marimba squid[7782]: Squid Parent: child process 7785 exited with status 0
    Jan 24 13:24:24 servidorx-marimba squid[7812]: Squid Parent: child process 7814 started

    ==> /var/log/squid/access.log <==
    1232777836.814 285 192.168.0.15 TCP_HIT/200 3785 GET http://static1.orkut.com/js/gen/scraps024.js - NONE/- application/x-javascript
    1232777837.039 1214 192.168.0.15 TCP_MISS/200 7523 GET http://www.orkut.com.br/Scrapbook.aspx?p=a - DIRECT/209.85.193.86 text/html
    1232777837.102 61 192.168.0.15 TCP_HIT/200 529 GET http://img1.orkut.com/img/castro/i_reply.gif - NONE/- image/gif
    1232777837.446 343 192.168.0.15 TCP_MISS/200 1510 GET http://img1.orkut.com/images/small/1...2804402/ln.jpg - DIRECT/209.85.193.85 image/jpeg
    1232777839.268 1866 192.168.0.15 TCP_MISS/200 11157 GET http://ll.atdmt.com/b/2NMBZBRAZBGH/B...0_new0202g.gif - DIRECT/65.54.93.163 image/gif
    1232777847.146 1303 192.168.0.15 TCP_MISS/200 12995 GET http://www.orkut.com.br/Home.aspx - DIRECT/209.85.193.86 text/html
    1232777847.844 180430 192.168.0.15 TCP_MISS/504 1487 GET http://www.aresgalaxy.org/ares/home4.php?ver=2.0.9.3030 - DIRECT/66.98.222.3 text/html
    1232777856.394 1255 192.168.0.4 TCP_MISS/200 406 GET http://tpb.tracker.thepiratebay.org/...v6=192.168.0.4 - DIRECT/77.247.176.145 text/plain
    1232777864.847 6319 192.168.0.15 TCP_MISS/301 729 GET Sexo | Vídeos de sexo grátis | Videos porno | Sexo anal - DIRECT/67.228.177.100 text/html
    1232777890.938 60577 192.168.0.15 TCP_MISS/504 1503 GET http://www.hotmail.msn.com/cgi-bin/m...26198652525921 - DIRECT/64.4.33.7 text/html

  4. #4

    Padrão

    [email protected]:/home/servidorx# ps -aux |grep squid
    Warning: bad ps syntax, perhaps a bogus '-'? See procps - Frequently Asked Questions (FAQ)
    root 7812 0.0 0.1 4972 652 ? Ss 13:24 0:00 /usr/sbin/squid -D -YC
    proxy 7814 0.2 0.9 7528 4828 ? S 13:24 0:00 (squid) -D -YC
    root 7940 0.0 0.1 3252 808 pts/1 S+ 13:25 0:00 grep squid
    [email protected]:/home/servidorx# tail -f /var/log/messages /var/log/squid/access.log
    ==> /var/log/messages <==
    Jan 24 12:39:02 servidorx-marimba pulseaudio[4874]: main.c: setrlimit(RLIMIT_RTPRIO, (9, 9)) failed: Operação não permitida
    Jan 24 12:45:06 servidorx-marimba kernel: [ 644.301595] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
    Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308478] CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Plase use
    Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308527] nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or
    Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308534] sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
    Jan 24 12:55:11 servidorx-marimba -- MARK --
    Jan 24 13:15:11 servidorx-marimba -- MARK --
    Jan 24 13:24:11 servidorx-marimba squid[7782]: Squid Parent: child process 7785 started
    Jan 24 13:24:22 servidorx-marimba squid[7782]: Squid Parent: child process 7785 exited with status 0
    Jan 24 13:24:24 servidorx-marimba squid[7812]: Squid Parent: child process 7814 started

    ==> /var/log/squid/access.log <==
    1232777836.814 285 192.168.0.15 TCP_HIT/200 3785 GET http://static1.orkut.com/js/gen/scraps024.js - NONE/- application/x-javascript
    1232777837.039 1214 192.168.0.15 TCP_MISS/200 7523 GET http://www.orkut.com.br/Scrapbook.aspx?p=a - DIRECT/209.85.193.86 text/html
    1232777837.102 61 192.168.0.15 TCP_HIT/200 529 GET http://img1.orkut.com/img/castro/i_reply.gif - NONE/- image/gif
    1232777837.446 343 192.168.0.15 TCP_MISS/200 1510 GET http://img1.orkut.com/images/small/1...2804402/ln.jpg - DIRECT/209.85.193.85 image/jpeg
    1232777839.268 1866 192.168.0.15 TCP_MISS/200 11157 GET http://ll.atdmt.com/b/2NMBZBRAZBGH/B...0_new0202g.gif - DIRECT/65.54.93.163 image/gif
    1232777847.146 1303 192.168.0.15 TCP_MISS/200 12995 GET http://www.orkut.com.br/Home.aspx - DIRECT/209.85.193.86 text/html
    1232777847.844 180430 192.168.0.15 TCP_MISS/504 1487 GET http://www.aresgalaxy.org/ares/home4.php?ver=2.0.9.3030 - DIRECT/66.98.222.3 text/html
    1232777856.394 1255 192.168.0.4 TCP_MISS/200 406 GET http://tpb.tracker.thepiratebay.org/...v6=192.168.0.4 - DIRECT/77.247.176.145 text/plain
    1232777864.847 6319 192.168.0.15 TCP_MISS/301 729 GET Sexo | Vídeos de sexo grátis | Videos porno | Sexo anal - DIRECT/67.228.177.100 text/html
    1232777890.938 60577 192.168.0.15 TCP_MISS/504 1503 GET http://www.hotmail.msn.com/cgi-bin/m...26198652525921 - DIRECT/64.4.33.7 text/html


    desculpa est0u enviando a reposta mais ela não aparece no meu post então se ja recebeu esta menssagem favor desconciderar



  5. #5

  6. #6

    Exclamation squid

    [email protected]:/home/servidorx# ps -aux |grep squid
    Warning: bad ps syntax, perhaps a bogus '-'? See procps - Frequently Asked Questions (FAQ)
    root 8088 0.0 0.1 3024 684 ? S 13:26 0:00 tail -f /var/log/messages /var/log/squid/access.log
    root 9506 0.0 0.1 4972 648 ? Ss 13:53 0:00 /usr/sbin/squid -D -YC
    proxy 9509 0.0 0.9 7528 4836 ? S 13:53 0:00 (squid) -D -YC
    root 10036 0.0 0.1 3252 808 pts/0 S+ 13:59 0:00 grep squid
    [email protected]:/home/servidorx# tail -f /var/log/squid/access.log
    1232777836.814 285 192.168.0.15 TCP_HIT/200 3785 GET http://static1.orkut.com/js/gen/scraps024.js - NONE/- application/x-javascript
    1232777837.039 1214 192.168.0.15 TCP_MISS/200 7523 GET http://www.orkut.com.br/Scrapbook.aspx?p=a - DIRECT/209.85.193.86 text/html
    1232777837.102 61 192.168.0.15 TCP_HIT/200 529 GET http://img1.orkut.com/img/castro/i_reply.gif - NONE/- image/gif
    1232777837.446 343 192.168.0.15 TCP_MISS/200 1510 GET http://img1.orkut.com/images/small/1...2804402/ln.jpg - DIRECT/209.85.193.85 image/jpeg
    1232777839.268 1866 192.168.0.15 TCP_MISS/200 11157 GET http://ll.atdmt.com/b/2NMBZBRAZBGH/B...0_new0202g.gif - DIRECT/65.54.93.163 image/gif
    1232777847.146 1303 192.168.0.15 TCP_MISS/200 12995 GET http://www.orkut.com.br/Home.aspx - DIRECT/209.85.193.86 text/html
    1232777847.844 180430 192.168.0.15 TCP_MISS/504 1487 GET http://www.aresgalaxy.org/ares/home4.php?ver=2.0.9.3030 - DIRECT/66.98.222.3 text/html
    1232777856.394 1255 192.168.0.4 TCP_MISS/200 406 GET http://tpb.tracker.thepiratebay.org/...v6=192.168.0.4 - DIRECT/77.247.176.145 text/plain
    1232777864.847 6319 192.168.0.15 TCP_MISS/301 729 GET Sexo | Vídeos de sexo grátis | Videos porno | Sexo anal - DIRECT/67.228.177.100 text/html
    1232777890.938 60577 192.168.0.15 TCP_MISS/504 1503 GET http://www.hotmail.msn.com/cgi-bin/m...26198652525921 - DIRECT/64.4.33.7 text/html


    onde está meu erro?



  7. #7

    Exclamation squid

    ***********************************************************************************************************************
    [email protected]:/home/servidorx# ps -aux |grep squid
    Warning: bad ps syntax, perhaps a bogus '-'? See procps - Frequently Asked Questions (FAQ)
    root 8088 0.0 0.1 3024 684 ? S 13:26 0:00 tail -f /var/log/messages /var/log/squid/access.log
    root 9506 0.0 0.1 4972 648 ? Ss 13:53 0:00 /usr/sbin/squid -D -YC
    proxy 9509 0.0 0.9 7528 4836 ? S 13:53 0:00 (squid) -D -YC
    root 10036 0.0 0.1 3252 808 pts/0 S+ 13:59 0:00 grep squid
    [email protected]:/home/servidorx# tail -f /var/log/squid/access.log
    1232777836.814 285 192.168.0.15 TCP_HIT/200 3785 GET http://static1.orkut.com/js/gen/scraps024.js - NONE/- application/x-javascript
    1232777837.039 1214 192.168.0.15 TCP_MISS/200 7523 GET http://www.orkut.com.br/Scrapbook.aspx?p=a - DIRECT/209.85.193.86 text/html
    1232777837.102 61 192.168.0.15 TCP_HIT/200 529 GET http://img1.orkut.com/img/castro/i_reply.gif - NONE/- image/gif
    1232777837.446 343 192.168.0.15 TCP_MISS/200 1510 GET http://img1.orkut.com/images/small/1...2804402/ln.jpg - DIRECT/209.85.193.85 image/jpeg
    1232777839.268 1866 192.168.0.15 TCP_MISS/200 11157 GET http://ll.atdmt.com/b/2NMBZBRAZBGH/B...0_new0202g.gif - DIRECT/65.54.93.163 image/gif
    1232777847.146 1303 192.168.0.15 TCP_MISS/200 12995 GET http://www.orkut.com.br/Home.aspx - DIRECT/209.85.193.86 text/html
    1232777847.844 180430 192.168.0.15 TCP_MISS/504 1487 GET http://www.aresgalaxy.org/ares/home4.php?ver=2.0.9.3030 - DIRECT/66.98.222.3 text/html
    1232777856.394 1255 192.168.0.4 TCP_MISS/200 406 GET http://tpb.tracker.thepiratebay.org/...v6=192.168.0.4 - DIRECT/77.247.176.145 text/plain
    1232777864.847 6319 192.168.0.15 TCP_MISS/301 729 GET Sexo | Vídeos de sexo grátis | Videos porno | Sexo anal - DIRECT/67.228.177.100 text/html
    1232777890.938 60577 192.168.0.15 TCP_MISS/504 1503 GET http://www.hotmail.msn.com/cgi-bin/m...26198652525921 - DIRECT/64.4.33.7 text/html

  8. #8

    Padrão

    Está usando Proxy transparente?

    faça os seguintes passos para começarmos a isolar os problemas.

    1 -
    # ps -aux |grep squid

    2 -
    # tail -f /var/log/messages /var/log/squid/access.log

    Posta aqui a saída desses comandos.

    Sds.

    ********************************************************************************************
    não consigo copiar e colar aki o resultado la do console



  9. #9

    Padrão

    Seu proxy não está transparente... vc setou o proxy nas configurações do browser dos clientes ?

    Caso queira deixá-lo transparente é só usar:

    http_port 3129 transparent

    OBS: Se setá-lo transparente tem que remover o proxy na config do browser dos clientes.
    Qualquer dúvida posta aí

  10. #10

    Padrão

    Amigo dê uma olhada no meu SQUID.CONF

    ********************************************************************
    http_port 3129 transparent
    visible_hostname servidorx-marimba

    cache_mem 64 MB
    maximum_object_size_in_memory 64 KB
    maximum_object_size 700 MB
    minimum_object_size 0 KB
    cache_swap_low 90
    cache_swap_high 95
    cache_dir ufs /var/spool/squid 2048 16 256
    cache_access_log /var/log/squid/access.log
    refresh_pattern ^ftp: 15 20% 2280
    refresh_pattern ^gopher: 15 0% 2280
    refresh_pattern . 15 20% 2280

    acl all src 0.0.0.0/0.0.0.0
    acl manager proto cache_object
    acl localhost src 127.0.0.1/255.255.255.255
    acl SSL_ports port 443 563
    acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 1025-65535
    acl purge method PURGE
    acl CONNECT method CONNECT

    http_access allow manager localhost
    http_access deny manager
    http_access allow purge localhost
    http_access deny purge
    http_access deny !Safe_ports
    http_access deny CONNECT !SSL_ports

    acl redelocal src 192.168.0.0/24
    http_access allow localhost
    http_access allow redelocal
    http_access deny all

    ********************************************************************
    como vê ele esta setado pra transparente ...

    MSN e Torrent . estão funcionando .

    oq acontece é q não abre nenhuma pagina de internet nem no mozilla nem no IE.

    ondeu eu errei?



  11. #11

  12. #12

    Padrão

    qual o erro que surge nos seus usuários internos? deve aparecer alguma coisa, o que, caramba?

    incrível essas perguntas: "ouvi um ruido na porta da cozinha da minha vizinha, o que pode ser?"



  13. #13

    Padrão

    Citação Postado originalmente por rospyn Ver Post
    Está usando Proxy transparente?

    faça os seguintes passos para começarmos a isolar os problemas.

    1 -
    # ps -aux |grep squid

    2 -
    # tail -f /var/log/messages /var/log/squid/access.log

    Posta aqui a saída desses comandos.

    Sds.

    com esta ajuda meu SQUID voltou a funfa..


    valew pessoal pela paciência
    fui

  14. #14