+ Responder ao Tópico



  1. #1

    Padrão AJUDA SQUID EM PARALELO COM MK

    ola para todos sou iniciante em linux e gostaria de uma ajuda de vcs.. para configurar o squid 2.7 com mk.
    sendo q a Debian 6.0.0 com 1 placa e o mk com 3 placas.
    mais ou menos assim
    mk eth0 > Link eth1 >cliente eth2 Debian
    obrigado a todos!!!!
    Última edição por tgr4487; 17-03-2011 às 14:24.

  2. #2
    SUPORTE E CONSULTORIA Avatar de Acronimo
    Ingresso
    Oct 2008
    Localização
    Rio de Janeiro - RJ
    Posts
    2.109
    Posts de Blog
    1

    Padrão Re: AJUDA SQUID EM PARALELO COM MK

    Vou postar as regras que uso para squid e thunder ok

    se adpte a sua necessidae trocando os ips


    /ip firewall nat
    add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
    add action=masquerade chain=srcnat comment="" disabled=no dst-address=\
    !172.31.255.2
    add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    disabled=no src-address=!10.25.10.0/24
    add action=dst-nat chain=dstnat comment="THUNDER - CACHE" disabled=no \
    dst-address=!172.31.255.2 dst-port=80 protocol=tcp src-address=\
    10.25.10.0/24 to-addresses=172.31.255.2 to-ports=3128
    add action=dst-nat chain=dstnat comment=Mk-auth disabled=no dst-port=81 \
    protocol=tcp to-addresses=172.31.255.2 to-ports=80
    add action=masquerade chain=srcnat comment=Net-Mk-auth disabled=no \



    /ip firewall filter
    add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes



    /ip firewall mangle
    add action=mark-connection chain=forward comment="CACHE FULL X:HITS" content=\
    "X-Cache: HIT" disabled=no new-connection-mark=forward-hits passthrough=\
    yes
    add action=mark-packet chain=forward comment="" connection-mark=forward-hits \
    disabled=no new-packet-mark=cache-hits passthrough=no
    add action=mark-connection chain=postrouting comment="THUNDER CACHE " \
    content="X-Cache: HIT from Thunder" disabled=no new-connection-mark=\
    thunder3-connection passthrough=yes
    add action=mark-packet chain=postrouting comment="" connection-mark=\
    thunder3-connection disabled=no new-packet-mark=thunder3-packs \
    passthrough=no



    /queue tree
    add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=4M name=2ThunderCache3 packet-mark=thunder3-packs parent=\
    global-out priority=8 queue=ethernet-default
    add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=3M name="1Cache squid Thunder cache" packet-mark=cache-hits \
    parent=global-out priority=2 queue=ethernet-default



  3. #3
    SUPORTE E CONSULTORIA Avatar de Acronimo
    Ingresso
    Oct 2008
    Localização
    Rio de Janeiro - RJ
    Posts
    2.109
    Posts de Blog
    1

    Padrão Re: AJUDA SQUID EM PARALELO COM MK

    Citação Postado originalmente por Acronimo Ver Post
    Vou postar as regras que uso para squid e thunder ok

    se adpte a sua necessidae trocando os ips


    /ip firewall nat
    add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
    add action=masquerade chain=srcnat comment="" disabled=no dst-address=\
    !172.31.255.2
    add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    disabled=no src-address=!10.25.10.0/24
    add action=dst-nat chain=dstnat comment="THUNDER - CACHE" disabled=no \
    dst-address=!172.31.255.2 dst-port=80 protocol=tcp src-address=\
    10.25.10.0/24 to-addresses=172.31.255.2 to-ports=3128
    add action=dst-nat chain=dstnat comment=Mk-auth disabled=no dst-port=81 \
    protocol=tcp to-addresses=172.31.255.2 to-ports=80
    add action=masquerade chain=srcnat comment=Net-Mk-auth disabled=no \



    /ip firewall filter
    add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes



    /ip firewall mangle
    add action=mark-connection chain=forward comment="CACHE FULL X:HITS" content=\
    "X-Cache: HIT" disabled=no new-connection-mark=forward-hits passthrough=\
    yes
    add action=mark-packet chain=forward comment="" connection-mark=forward-hits \
    disabled=no new-packet-mark=cache-hits passthrough=no
    add action=mark-connection chain=postrouting comment="THUNDER CACHE " \
    content="X-Cache: HIT from Thunder" disabled=no new-connection-mark=\
    thunder3-connection passthrough=yes
    add action=mark-packet chain=postrouting comment="" connection-mark=\
    thunder3-connection disabled=no new-packet-mark=thunder3-packs \
    passthrough=no



    /queue tree
    add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=4M name=2ThunderCache3 packet-mark=thunder3-packs parent=\
    global-out priority=8 queue=ethernet-default
    add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
    max-limit=3M name="1Cache squid Thunder cache" packet-mark=cache-hits \
    parent=global-out priority=2 queue=ethernet-default

    Mikoritk 172.31.255.1/30
    Squid Thunder 172.31.255.2/30
    Faixa de clientes 10.25.10.0/24

  4. #4

    Padrão Re: AJUDA SQUID EM PARALELO COM MK

    vlw vo tentar aki depois eu posto bl
    briado!!!