Squid não Conecta maquina Cliente

[lordsnc]

Ola amigos..

tenho uma rede com 20 pcs .
estou tendo problema com a configuração do SQUID
segue abaixo o SQUID.CONF q uso

##########################

http_port 3129
visible_hostname servidorx-marimba

cache_mem 64 MB
maximum_object_size_in_memory 64 KB
maximum_object_size 750 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 2048 16 256
cache_access_log /var/log/squid/access.log
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 1025-65535
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

acl redelocal src 192.168.0.0/24
http_access allow localhost
http_access allow redelocal
http_access deny all

aparentemente tudo OK ...

considerações:

=>IP do eth0 (rede local) é 192.168.0.1
=>as maquinas da rede não estão abrindo paginas de internet

alguma ideia de onde errei?!

[rospyn]

Está usando Proxy transparente?

faça os seguintes passos para começarmos a isolar os problemas.

1 -
# ps -aux |grep squid

2 -
# tail -f /var/log/messages /var/log/squid/access.log

Posta aqui a saída desses comandos.

Sds.

[lordsnc]

root@servidorx-marimba:/home/servidorx# ps -aux |grep squid
Warning: bad ps syntax, perhaps a bogus '-'? See procps - Frequently Asked Questions (FAQ)
root 7812 0.0 0.1 4972 652 ? Ss 13:24 0:00 /usr/sbin/squid -D -YC
proxy 7814 0.2 0.9 7528 4828 ? S 13:24 0:00 (squid) -D -YC
root 7940 0.0 0.1 3252 808 pts/1 S+ 13:25 0:00 grep squid
root@servidorx-marimba:/home/servidorx# tail -f /var/log/messages /var/log/squid/access.log
==> /var/log/messages <==
Jan 24 12:39:02 servidorx-marimba pulseaudio[4874]: main.c: setrlimit(RLIMIT_RTPRIO, (9, 9)) failed: Operação não permitida
Jan 24 12:45:06 servidorx-marimba kernel: [ 644.301595] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308478] CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Plase use
Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308527] nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or
Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308534] sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
Jan 24 12:55:11 servidorx-marimba -- MARK --
Jan 24 13:15:11 servidorx-marimba -- MARK --
Jan 24 13:24:11 servidorx-marimba squid[7782]: Squid Parent: child process 7785 started
Jan 24 13:24:22 servidorx-marimba squid[7782]: Squid Parent: child process 7785 exited with status 0
Jan 24 13:24:24 servidorx-marimba squid[7812]: Squid Parent: child process 7814 started

==> /var/log/squid/access.log <==
1232777836.814 285 192.168.0.15 TCP_HIT/200 3785 GET http://static1.orkut.com/js/gen/scraps024.js - NONE/- application/x-javascript
1232777837.039 1214 192.168.0.15 TCP_MISS/200 7523 GET http://www.orkut.com.br/Scrapbook.aspx?p=a - DIRECT/209.85.193.86 text/html
1232777837.102 61 192.168.0.15 TCP_HIT/200 529 GET http://img1.orkut.com/img/castro/i_reply.gif - NONE/- image/gif
1232777837.446 343 192.168.0.15 TCP_MISS/200 1510 GET http://img1.orkut.com/images/small/1...2804402/ln.jpg - DIRECT/209.85.193.85 image/jpeg
1232777839.268 1866 192.168.0.15 TCP_MISS/200 11157 GET http://ll.atdmt.com/b/2NMBZBRAZBGH/B...0_new0202g.gif - DIRECT/65.54.93.163 image/gif
1232777847.146 1303 192.168.0.15 TCP_MISS/200 12995 GET http://www.orkut.com.br/Home.aspx - DIRECT/209.85.193.86 text/html
1232777847.844 180430 192.168.0.15 TCP_MISS/504 1487 GET http://www.aresgalaxy.org/ares/home4.php?ver=2.0.9.3030 - DIRECT/66.98.222.3 text/html
1232777856.394 1255 192.168.0.4 TCP_MISS/200 406 GET http://tpb.tracker.thepiratebay.org/...v6=192.168.0.4 - DIRECT/77.247.176.145 text/plain
1232777864.847 6319 192.168.0.15 TCP_MISS/301 729 GET Sexo | Vídeos de sexo grátis | Videos porno | Sexo anal - DIRECT/67.228.177.100 text/html
1232777890.938 60577 192.168.0.15 TCP_MISS/504 1503 GET http://www.hotmail.msn.com/cgi-bin/m...26198652525921 - DIRECT/64.4.33.7 text/html

[lordsnc]

root@servidorx-marimba:/home/servidorx# ps -aux |grep squid
Warning: bad ps syntax, perhaps a bogus '-'? See procps - Frequently Asked Questions (FAQ)
root 7812 0.0 0.1 4972 652 ? Ss 13:24 0:00 /usr/sbin/squid -D -YC
proxy 7814 0.2 0.9 7528 4828 ? S 13:24 0:00 (squid) -D -YC
root 7940 0.0 0.1 3252 808 pts/1 S+ 13:25 0:00 grep squid
root@servidorx-marimba:/home/servidorx# tail -f /var/log/messages /var/log/squid/access.log
==> /var/log/messages <==
Jan 24 12:39:02 servidorx-marimba pulseaudio[4874]: main.c: setrlimit(RLIMIT_RTPRIO, (9, 9)) failed: Operação não permitida
Jan 24 12:45:06 servidorx-marimba kernel: [ 644.301595] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308478] CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Plase use
Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308527] nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or
Jan 24 12:45:06 servidorx-marimba kernel: [ 644.308534] sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
Jan 24 12:55:11 servidorx-marimba -- MARK --
Jan 24 13:15:11 servidorx-marimba -- MARK --
Jan 24 13:24:11 servidorx-marimba squid[7782]: Squid Parent: child process 7785 started
Jan 24 13:24:22 servidorx-marimba squid[7782]: Squid Parent: child process 7785 exited with status 0
Jan 24 13:24:24 servidorx-marimba squid[7812]: Squid Parent: child process 7814 started

==> /var/log/squid/access.log <==
1232777836.814 285 192.168.0.15 TCP_HIT/200 3785 GET http://static1.orkut.com/js/gen/scraps024.js - NONE/- application/x-javascript
1232777837.039 1214 192.168.0.15 TCP_MISS/200 7523 GET http://www.orkut.com.br/Scrapbook.aspx?p=a - DIRECT/209.85.193.86 text/html
1232777837.102 61 192.168.0.15 TCP_HIT/200 529 GET http://img1.orkut.com/img/castro/i_reply.gif - NONE/- image/gif
1232777837.446 343 192.168.0.15 TCP_MISS/200 1510 GET http://img1.orkut.com/images/small/1...2804402/ln.jpg - DIRECT/209.85.193.85 image/jpeg
1232777839.268 1866 192.168.0.15 TCP_MISS/200 11157 GET http://ll.atdmt.com/b/2NMBZBRAZBGH/B...0_new0202g.gif - DIRECT/65.54.93.163 image/gif
1232777847.146 1303 192.168.0.15 TCP_MISS/200 12995 GET http://www.orkut.com.br/Home.aspx - DIRECT/209.85.193.86 text/html
1232777847.844 180430 192.168.0.15 TCP_MISS/504 1487 GET http://www.aresgalaxy.org/ares/home4.php?ver=2.0.9.3030 - DIRECT/66.98.222.3 text/html
1232777856.394 1255 192.168.0.4 TCP_MISS/200 406 GET http://tpb.tracker.thepiratebay.org/...v6=192.168.0.4 - DIRECT/77.247.176.145 text/plain
1232777864.847 6319 192.168.0.15 TCP_MISS/301 729 GET Sexo | Vídeos de sexo grátis | Videos porno | Sexo anal - DIRECT/67.228.177.100 text/html
1232777890.938 60577 192.168.0.15 TCP_MISS/504 1503 GET http://www.hotmail.msn.com/cgi-bin/m...26198652525921 - DIRECT/64.4.33.7 text/html


desculpa est0u enviando a reposta mais ela não aparece no meu post então se ja recebeu esta menssagem favor desconciderar

[lordsnc]

agora so o msn funciona

[lordsnc]

root@servidorx-marimba:/home/servidorx# ps -aux |grep squid
Warning: bad ps syntax, perhaps a bogus '-'? See procps - Frequently Asked Questions (FAQ)
root 8088 0.0 0.1 3024 684 ? S 13:26 0:00 tail -f /var/log/messages /var/log/squid/access.log
root 9506 0.0 0.1 4972 648 ? Ss 13:53 0:00 /usr/sbin/squid -D -YC
proxy 9509 0.0 0.9 7528 4836 ? S 13:53 0:00 (squid) -D -YC
root 10036 0.0 0.1 3252 808 pts/0 S+ 13:59 0:00 grep squid
root@servidorx-marimba:/home/servidorx# tail -f /var/log/squid/access.log
1232777836.814 285 192.168.0.15 TCP_HIT/200 3785 GET http://static1.orkut.com/js/gen/scraps024.js - NONE/- application/x-javascript
1232777837.039 1214 192.168.0.15 TCP_MISS/200 7523 GET http://www.orkut.com.br/Scrapbook.aspx?p=a - DIRECT/209.85.193.86 text/html
1232777837.102 61 192.168.0.15 TCP_HIT/200 529 GET http://img1.orkut.com/img/castro/i_reply.gif - NONE/- image/gif
1232777837.446 343 192.168.0.15 TCP_MISS/200 1510 GET http://img1.orkut.com/images/small/1...2804402/ln.jpg - DIRECT/209.85.193.85 image/jpeg
1232777839.268 1866 192.168.0.15 TCP_MISS/200 11157 GET http://ll.atdmt.com/b/2NMBZBRAZBGH/B...0_new0202g.gif - DIRECT/65.54.93.163 image/gif
1232777847.146 1303 192.168.0.15 TCP_MISS/200 12995 GET http://www.orkut.com.br/Home.aspx - DIRECT/209.85.193.86 text/html
1232777847.844 180430 192.168.0.15 TCP_MISS/504 1487 GET http://www.aresgalaxy.org/ares/home4.php?ver=2.0.9.3030 - DIRECT/66.98.222.3 text/html
1232777856.394 1255 192.168.0.4 TCP_MISS/200 406 GET http://tpb.tracker.thepiratebay.org/...v6=192.168.0.4 - DIRECT/77.247.176.145 text/plain
1232777864.847 6319 192.168.0.15 TCP_MISS/301 729 GET Sexo | Vídeos de sexo grátis | Videos porno | Sexo anal - DIRECT/67.228.177.100 text/html
1232777890.938 60577 192.168.0.15 TCP_MISS/504 1503 GET http://www.hotmail.msn.com/cgi-bin/m...26198652525921 - DIRECT/64.4.33.7 text/html


onde está meu erro?

[lordsnc]

***********************************************************************************************************************
boot@servidorx-marimba:/home/servidorx# ps -aux |grep squid
Warning: bad ps syntax, perhaps a bogus '-'? See procps - Frequently Asked Questions (FAQ)
root 8088 0.0 0.1 3024 684 ? S 13:26 0:00 tail -f /var/log/messages /var/log/squid/access.log
root 9506 0.0 0.1 4972 648 ? Ss 13:53 0:00 /usr/sbin/squid -D -YC
proxy 9509 0.0 0.9 7528 4836 ? S 13:53 0:00 (squid) -D -YC
root 10036 0.0 0.1 3252 808 pts/0 S+ 13:59 0:00 grep squid
root@servidorx-marimba:/home/servidorx# tail -f /var/log/squid/access.log
1232777836.814 285 192.168.0.15 TCP_HIT/200 3785 GET http://static1.orkut.com/js/gen/scraps024.js - NONE/- application/x-javascript
1232777837.039 1214 192.168.0.15 TCP_MISS/200 7523 GET http://www.orkut.com.br/Scrapbook.aspx?p=a - DIRECT/209.85.193.86 text/html
1232777837.102 61 192.168.0.15 TCP_HIT/200 529 GET http://img1.orkut.com/img/castro/i_reply.gif - NONE/- image/gif
1232777837.446 343 192.168.0.15 TCP_MISS/200 1510 GET http://img1.orkut.com/images/small/1...2804402/ln.jpg - DIRECT/209.85.193.85 image/jpeg
1232777839.268 1866 192.168.0.15 TCP_MISS/200 11157 GET http://ll.atdmt.com/b/2NMBZBRAZBGH/B...0_new0202g.gif - DIRECT/65.54.93.163 image/gif
1232777847.146 1303 192.168.0.15 TCP_MISS/200 12995 GET http://www.orkut.com.br/Home.aspx - DIRECT/209.85.193.86 text/html
1232777847.844 180430 192.168.0.15 TCP_MISS/504 1487 GET http://www.aresgalaxy.org/ares/home4.php?ver=2.0.9.3030 - DIRECT/66.98.222.3 text/html
1232777856.394 1255 192.168.0.4 TCP_MISS/200 406 GET http://tpb.tracker.thepiratebay.org/...v6=192.168.0.4 - DIRECT/77.247.176.145 text/plain
1232777864.847 6319 192.168.0.15 TCP_MISS/301 729 GET Sexo | Vídeos de sexo grátis | Videos porno | Sexo anal - DIRECT/67.228.177.100 text/html
1232777890.938 60577 192.168.0.15 TCP_MISS/504 1503 GET http://www.hotmail.msn.com/cgi-bin/m...26198652525921 - DIRECT/64.4.33.7 text/html

[lordsnc]

Está usando Proxy transparente?

faça os seguintes passos para começarmos a isolar os problemas.

1 -
# ps -aux |grep squid

2 -
# tail -f /var/log/messages /var/log/squid/access.log

Posta aqui a saída desses comandos.

Sds.

********************************************************************************************
não consigo copiar e colar aki o resultado la do console

[fmeschini]

Seu proxy não está transparente... vc setou o proxy nas configurações do browser dos clientes ?

Caso queira deixá-lo transparente é só usar:

http_port 3129 transparent

OBS: Se setá-lo transparente tem que remover o proxy na config do browser dos clientes.
Qualquer dúvida posta aí

[lordsnc]

Amigo dê uma olhada no meu SQUID.CONF

********************************************************************
http_port 3129 transparent
visible_hostname servidorx-marimba

cache_mem 64 MB
maximum_object_size_in_memory 64 KB
maximum_object_size 700 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid 2048 16 256
cache_access_log /var/log/squid/access.log
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 1025-65535
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

acl redelocal src 192.168.0.0/24
http_access allow localhost
http_access allow redelocal
http_access deny all

********************************************************************
como vê ele esta setado pra transparente ...

MSN e Torrent . estão funcionando .

oq acontece é q não abre nenhuma pagina de internet nem no mozilla nem no IE.

ondeu eu errei?

[lordsnc]

alguma ideia de onde errei?

[irado]

qual o erro que surge nos seus usuários internos? deve aparecer alguma coisa, o que, caramba?

incrível essas perguntas: "ouvi um ruido na porta da cozinha da minha vizinha, o que pode ser?"

[lordsnc]

Está usando Proxy transparente?

faça os seguintes passos para começarmos a isolar os problemas.

1 -
# ps -aux |grep squid

2 -
# tail -f /var/log/messages /var/log/squid/access.log

Posta aqui a saída desses comandos.

Sds.

com esta ajuda meu SQUID voltou a funfa..


valew pessoal pela paciência
fui

[lordsnc]

resolvidoooooooooooooooO