Meu squid.conf

http_port 10.0.1.0:3128
http_port 10.0.2.0:3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_swap_low 90
cache_swap_high 93
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 100 KB
ipcache_size 1024
ipcache_low 90
ipcache_high 93
cache_dir ufs /var/spool/squid/cache 42 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl rede src 10.0.1.0/255.255.255.0
acl rede2 src 10.0.2.0/255.255.255.0
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow localhost
http_access allow rede
http_access allow rede2
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
http_reply_access allow all
icp_access allow all
httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

o que tem de errado pro squid nao ta funcionando em modo transparente ?

[Jim]

posta tuas regras de redirect?

iptables -t nat -A PREROUTING -s 0/0 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A PREROUTING -s 0/0 -p udp --dport 80 -j REDIRECT --to-port 3128

é isso ?

[pilantrox]

as minhas estão assim ,,, -i interface da rede que vi utilisar o proxy..

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A PREROUTING -i eth1 -p udp --dport 80 -j REDIRECT --to-port 3128

tenta colocar essas ai ,, se naum direcionar,,cola pra gente o arquivo cache.log /var/log/squid/cache.log ........

iptables -t nat -A PREROUTING -s 0/0 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A PREROUTING -s 0/0 -p udp --dport 80 -j REDIRECT --to-port 3128

é isso ?

fiz isso e nao funcionou
olha o cache.log


2005/02/11 17:07:48| Squid Cache (Version 2.5.STABLE7): Exiting normally.
2005/02/14 13:31:31| Starting Squid Cache version 2.5.STABLE7 for i686-pc-linux-gnu...
2005/02/14 13:31:31| Process ID 14612
2005/02/14 13:31:31| With 1024 file descriptors available
2005/02/14 13:31:31| Performing DNS Tests...
2005/02/14 13:31:31| Successful DNS name lookup tests...
2005/02/14 13:31:31| DNS Socket created at 0.0.0.0, port 1051, FD 4
2005/02/14 13:31:31| Adding nameserver 200.255.5.17 from /etc/resolv.conf
2005/02/14 13:31:31| Adding nameserver 200.255.5.5 from /etc/resolv.conf
2005/02/14 13:31:31| Unlinkd pipe opened on FD 9
2005/02/14 13:31:31| Swap maxSize 102400 KB, estimated 7876 objects
2005/02/14 13:31:31| Target number of buckets: 393
2005/02/14 13:31:31| Using 8192 Store buckets
2005/02/14 13:31:31| Max Mem size: 65536 KB
2005/02/14 13:31:31| Max Swap size: 102400 KB
2005/02/14 13:31:31| Rebuilding storage in /var/lib/squid/cache (CLEAN)
2005/02/14 13:31:31| Using Least Load store dir selection
2005/02/14 13:31:31| Set Current Directory to /usr/local/squid/var/cache
2005/02/14 13:31:31| Loaded Icons.
2005/02/14 13:31:31| Accepting HTTP connections at 10.0.1.0, port 3128, FD 10.
2005/02/14 13:31:31| Accepting HTTP connections at 10.0.2.0, port 3128, FD 11.
2005/02/14 13:31:31| Accepting ICP messages at 0.0.0.0, port 3130, FD 12.
2005/02/14 13:31:31| WCCP Disabled.
2005/02/14 13:31:31| Ready to serve requests.
2005/02/14 13:31:32| Done scanning /var/lib/squid/cache swaplog (0 entries)
2005/02/14 13:31:32| Finished rebuilding storage from disk.
2005/02/14 13:31:32| 0 Entries scanned
2005/02/14 13:31:32| 0 Invalid entries.
2005/02/14 13:31:32| 0 With invalid flags.
2005/02/14 13:31:32| 0 Objects loaded.
2005/02/14 13:31:32| 0 Objects expired.
2005/02/14 13:31:32| 0 Objects cancelled.
2005/02/14 13:31:32| 0 Duplicate URLs purged.
2005/02/14 13:31:32| 0 Swapfile clashes avoided.
2005/02/14 13:31:32| Took 1.1 seconds ( 0.0 objects/sec).
2005/02/14 13:31:32| Beginning Validation Procedure
2005/02/14 13:31:32| Completed Validation Procedure
2005/02/14 13:31:32| Validated 0 Entries
2005/02/14 13:31:32| store_swap_size = 0k
2005/02/14 13:31:33| storeLateRelease: released 0 objects
2005/02/14 13:31:35| Preparing for shutdown after 0 requests
2005/02/14 13:31:35| Waiting 30 seconds for active connections to finish
2005/02/14 13:31:35| FD 10 Closing HTTP connection
2005/02/14 13:31:35| FD 11 Closing HTTP connection
2005/02/14 13:31:37| Shutting down...
2005/02/14 13:31:37| FD 12 Closing ICP connection
2005/02/14 13:31:37| Closing unlinkd pipe on FD 9
2005/02/14 13:31:37| storeDirWriteCleanLogs: Starting...
2005/02/14 13:31:37| Finished. Wrote 0 entries.
2005/02/14 13:31:37| Finished. Wrote 0 entries.
2005/02/14 13:31:37| Took 0.0 seconds ( 0.0 entries/sec).
CPU Usage: 0.390 seconds = 0.090 user + 0.300 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 377
Memory usage for squid via mallinfo():
total space in arena: 2006 KB
Ordinary blocks: 1989 KB 4 blks
Small blocks: 0 KB 5 blks
Holding blocks: 192 KB 1 blks
Free Small blocks: 0 KB
Free Ordinary blocks: 17 KB
Total in use: 2181 KB 109%
Total free: 17 KB 1%
2005/02/14 13:31:37| Squid Cache (Version 2.5.STABLE7): Exiting normally.
2005/02/14 13:33:44| Starting Squid Cache version 2.5.STABLE7 for i686-pc-linux-gnu...
2005/02/14 13:33:44| Process ID 14638
2005/02/14 13:33:44| With 1024 file descriptors available
2005/02/14 13:33:44| DNS Socket created at 0.0.0.0, port 1051, FD 4
2005/02/14 13:33:44| Adding nameserver 200.255.5.17 from /etc/resolv.conf
2005/02/14 13:33:44| Adding nameserver 200.255.5.5 from /etc/resolv.conf
2005/02/14 13:33:44| Unlinkd pipe opened on FD 9
2005/02/14 13:33:44| Swap maxSize 102400 KB, estimated 7876 objects
2005/02/14 13:33:44| Target number of buckets: 393
2005/02/14 13:33:44| Using 8192 Store buckets
2005/02/14 13:33:44| Max Mem size: 65536 KB
2005/02/14 13:33:44| Max Swap size: 102400 KB
2005/02/14 13:33:44| Rebuilding storage in /var/lib/squid/cache (CLEAN)
2005/02/14 13:33:44| Using Least Load store dir selection
2005/02/14 13:33:44| Set Current Directory to /usr/local/squid/var/cache
2005/02/14 13:33:44| Loaded Icons.
2005/02/14 13:33:44| Accepting HTTP connections at 10.0.1.0, port 3128, FD 10.
2005/02/14 13:33:44| Accepting HTTP connections at 10.0.2.0, port 3128, FD 11.
2005/02/14 13:33:44| Accepting ICP messages at 0.0.0.0, port 3130, FD 12.
2005/02/14 13:33:44| WCCP Disabled.
2005/02/14 13:33:44| Ready to serve requests.
2005/02/14 13:33:44| Done scanning /var/lib/squid/cache swaplog (0 entries)
2005/02/14 13:33:44| Finished rebuilding storage from disk.
2005/02/14 13:33:44| 0 Entries scanned
2005/02/14 13:33:44| 0 Invalid entries.
2005/02/14 13:33:44| 0 With invalid flags.
2005/02/14 13:33:44| 0 Objects loaded.
2005/02/14 13:33:44| 0 Objects expired.
2005/02/14 13:33:44| 0 Objects cancelled.
2005/02/14 13:33:44| 0 Duplicate URLs purged.
2005/02/14 13:33:44| 0 Swapfile clashes avoided.
2005/02/14 13:33:44| Took 0.5 seconds ( 0.0 objects/sec).
2005/02/14 13:33:44| Beginning Validation Procedure
2005/02/14 13:33:44| Completed Validation Procedure
2005/02/14 13:33:44| Validated 0 Entries
2005/02/14 13:33:44| store_swap_size = 0k
2005/02/14 13:33:45| storeLateRelease: released 0 objects

[pilantrox]

faz o seguinte ,,, aparentemente tah tudo ok ,,, mas pra podermos analizar melhor oq esta se passando faz o seguinte ,,, deleta os arquivos , store.log , cache.log e access.log, deleta o cache , para todos os processos de squid q tem rodando ,,, squid -k kill ,,, e inicia novamente,,,,
squid -z
squid -Ds
depois disso roda manualmente no shell as linhas de iptables e analiza no teu access.log se tah havendo solicitacoes de web nele.... aproveita e coloca novamente o cache.log novo q ele vai criar pra mim dar uma analizada...........

fiz isso e que estranho o access.log nao tem nada
e olha o cache.log
2005/02/15 13:51:46| Starting Squid Cache version 2.5.STABLE7 for i686-pc-linux-gnu...
2005/02/15 13:51:46| Process ID 949
2005/02/15 13:51:46| With 1024 file descriptors available
2005/02/15 13:51:46| DNS Socket created at 0.0.0.0, port 1026, FD 5
2005/02/15 13:51:46| Adding nameserver 200.255.5.17 from /etc/resolv.conf
2005/02/15 13:51:46| Adding nameserver 200.255.5.5 from /etc/resolv.conf
2005/02/15 13:51:46| Unlinkd pipe opened on FD 10
2005/02/15 13:51:46| Swap maxSize 102400 KB, estimated 7876 objects
2005/02/15 13:51:46| Target number of buckets: 393
2005/02/15 13:51:46| Using 8192 Store buckets
2005/02/15 13:51:46| Max Mem size: 65536 KB
2005/02/15 13:51:46| Max Swap size: 102400 KB
2005/02/15 13:51:46| Rebuilding storage in /var/lib/squid/cache (DIRTY)
2005/02/15 13:51:46| Using Least Load store dir selection
2005/02/15 13:51:46| Set Current Directory to /usr/local/squid/var/cache
2005/02/15 13:51:46| Loaded Icons.
2005/02/15 13:51:46| Accepting HTTP connections at 10.0.1.0, port 3128, FD 11.
2005/02/15 13:51:46| Accepting HTTP connections at 10.0.2.0, port 3128, FD 12.
2005/02/15 13:51:46| Accepting ICP messages at 0.0.0.0, port 3130, FD 13.
2005/02/15 13:51:46| WCCP Disabled.
2005/02/15 13:51:46| Ready to serve requests.
2005/02/15 13:51:47| Done scanning /var/lib/squid/cache swaplog (0 entries)
2005/02/15 13:51:47| Finished rebuilding storage from disk.
2005/02/15 13:51:47| 0 Entries scanned
2005/02/15 13:51:47| 0 Invalid entries.
2005/02/15 13:51:47| 0 With invalid flags.
2005/02/15 13:51:47| 0 Objects loaded.
2005/02/15 13:51:47| 0 Objects expired.
2005/02/15 13:51:47| 0 Objects cancelled.
2005/02/15 13:51:47| 0 Duplicate URLs purged.
2005/02/15 13:51:47| 0 Swapfile clashes avoided.
2005/02/15 13:51:47| Took 0.6 seconds ( 0.0 objects/sec).
2005/02/15 13:51:47| Beginning Validation Procedure
2005/02/15 13:51:47| Completed Validation Procedure
2005/02/15 13:51:47| Validated 0 Entries
2005/02/15 13:51:47| store_swap_size = 0k
2005/02/15 13:51:47| storeLateRelease: released 0 objects
2005/02/15 13:53:17| Preparing for shutdown after 0 requests
2005/02/15 13:53:17| Waiting 30 seconds for active connections to finish
2005/02/15 13:53:17| FD 11 Closing HTTP connection
2005/02/15 13:53:17| FD 12 Closing HTTP connection
2005/02/15 13:53:18| Shutting down...
2005/02/15 13:53:18| FD 13 Closing ICP connection
2005/02/15 13:53:18| Closing unlinkd pipe on FD 10
2005/02/15 13:53:18| storeDirWriteCleanLogs: Starting...
2005/02/15 13:53:18| Finished. Wrote 0 entries.
2005/02/15 13:53:18| Took 0.0 seconds ( 0.0 entries/sec).
CPU Usage: 0.280 seconds = 0.080 user + 0.200 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 356
Memory usage for squid via mallinfo():
total space in arena: 2006 KB
Ordinary blocks: 1986 KB 7 blks
Small blocks: 0 KB 0 blks
Holding blocks: 192 KB 1 blks
Free Small blocks: 0 KB
Free Ordinary blocks: 19 KB
Total in use: 2178 KB 109%
Total free: 19 KB 1%

sera que tem alguma a coisa a ver com o dns ?
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 10.0.1.2 anywhere
MASQUERADE all -- 10.0.2.2 anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

valeu cara desculpe incomodar tanto mas ja li bastante e nao to enchergando meu erro.

[epf]

posta o teu firewall aqui se tiver como..


uma otura pergunta: No modo de proxy normal, sem o redireciomento, o squid esta funcionando corretamente?

abracos
epf

#!/bin/sh

# Limpar Regras
iptables -F
iptables -F -t nat

#Arquivo de Regras do Firewall
iptables -P FORWARD DROP

iptables -t nat -A POSTROUTING -s 10.0.1.2 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 10.0.2.2 -j MASQUERADE

#porta bloq
iptables -I FORWARD -j DROP -p udp --dport 119
iptables -I FORWARD -j DROP -p udp --sport 119
iptables -I FORWARD -j DROP -p udp --dport 137
iptables -I FORWARD -j DROP -p udp --sport 137
iptables -I FORWARD -j DROP -p udp --dport 138
iptables -I FORWARD -j DROP -p udp --sport 138
iptables -I FORWARD -j DROP -p tcp --dport 139
iptables -I FORWARD -j DROP -p tcp --sport 139
iptables -I FORWARD -j DROP -p tcp --dport 119
iptables -I FORWARD -j DROP -p tcp --sport 119
iptables -I FORWARD -j DROP -p tcp --dport 137
iptables -I FORWARD -j DROP -p tcp --sport 137
iptables -I FORWARD -j DROP -p tcp --dport 138
iptables -I FORWARD -j DROP -p tcp --sport 138
iptables -I FORWARD -j DROP -p udp --dport 139
iptables -I FORWARD -j DROP -p udp --sport 139
iptables -I FORWARD -j DROP -p udp --dport 145
iptables -I FORWARD -j DROP -p udp --sport 145
iptables -I FORWARD -j DROP -p udp --dport 145
iptables -I FORWARD -j DROP -p udp --sport 145
iptables -I FORWARD -j DROP -p udp --dport 445
iptables -I FORWARD -j DROP -p udp --sport 445
iptables -I FORWARD -j DROP -p tcp --dport 445
iptables -I FORWARD -j DROP -p tcp --sport 445
iptables -A FORWARD -s 10.0.1.2 -j ACCEPT
iptables -A FORWARD -d 10.0.1.2 -j ACCEPT

iptables -A FORWARD -s 10.0.2.2 -j ACCEPT
iptables -A FORWARD -d 10.0.2.2 -j ACCEPT


é so isso de regras que eu tenho
e no modo normal nao testei, vou testar depois posto. ai eu tenho que configurar no navegador neh ?

nao , nao no modo normal tb nao funfa.

qual teu e-mail para receber um squid.conf

[epf]

Voce esta usando qual Distro?

to usando slackware 9
oh galera perdao
acho que vi meu erro
http_port 10.0.1.0:3128
http_port 10.0.2.0:3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?

eu alterei o http_port para 10.0.1.1:3128
http_port 10.0.2.2:3128
que na verdade sao os ips da respectivas eth0 e eth1 e acho que agora foi.
olhem um pedaço do acces.log
108485675.460 556 10.0.1.0 TCP_MISS/302 448 GET http://ad.doubleclick.net/ad/br.terr...ao;sz=1x1;ord=[timestamp]? - DIRECT/216.73.86.23 -
1108485675.997 430 10.0.1.0 TCP_MISS/302 448 GET http://ad.doubleclick.net/ad/br.terr...or;sz=1x1;ord=[timestamp]? - DIRECT/216.73.86.23 -
1108485676.585 588 10.0.1.0 TCP_MISS/200 1649 GET http://img.terra.com.br/ads/ppi/prod...5214154410.gif - DIRECT/200.176.3.221 image/gif
1108485676.785 198 10.0.1.0 TCP_MISS/200 915 GET http://img.terra.com.br/ads/ppi/prod...0521595533.gif - DIRECT/200.176.3.221 image/gif
1108485677.089 766 10.0.1.0 TCP_MISS/200 4837 GET http://ad.doubleclick.net/adj/br.ter...st;ord=957730? - DIRECT/216.73.86.23
application/x-javascript
1108485677.731 641 10.0.1.0 TCP_MISS/200 650 GET http://www.terra.com.br/ads/barra_vertical.ads? - DIRECT/200.176.3.142 text/html
1108485677.749 884 10.0.1.0 TCP_MISS/200 316 GET http://m3.doubleclick.net/viewad/656555/x.gif - DIRECT/216.73.87.13 image/gif
1108485678.395 646 10.0.1.0 TCP_MISS/200 15651 GET http://img.terra.com.br/ads/abril_02...0_coletiva.gif - DIRECT/200.176.3.221 image/gif
1108485678.558 3316 10.0.1.0 TCP_MISS/200 1431 GET http://img.terra.com.br/ads/ppi/prod...5214182230.gif - DIRECT/200.176.3.221 image/gif
1108485679.851 4310 10.0.1.0 TCP_MISS/200 12332 GET http://m3.doubleclick.net/1005364/fu...ast_110205.gif - DIRECT/216.73.87.13 image/gif
1108485713.340 16487 10.0.1.0 TCP_MISS/200 53611 GET http://www.uol.com.br/ - DIRECT/200.221.2.45 text/html
1108485717.468 154 10.0.1.0 TCP_MISS/200 2189 GET http://de.uol.com.br/js.ng/site=uolb...=0&ord=262642? -
DIRECT/200.221.6.45 application/x-javascript
1108485718.395 274 10.0.1.0 TCP_MISS/200 8911 GET http://home.img.uol.com.br/0502/j/050215cavalcanti.jpg - DIRECT/200.221.7.37 image/jpeg
1108485722.745 241 10.0.1.0 TCP_MISS/200 12591 GET http://de.i.uol.com.br/mercadolivre/...FILMADORAS.gif - DIRECT/200.221.7.38 image/gif
1108485750.939 8140 10.0.2.0 TCP_MISS/200 2251 GET http://www.flogao.com.br/bondedoexperimenta - DIRECT/67.18.200.78 text/html
1108485765.446 10719 10.0.2.0 TCP_MISS/200 7299 GET http://i2.flogao.com.br/flogs2.js - DIRECT/70.85.51.53 application/x-javascript
1108485766.125 458 10.0.2.0 TCP_MISS/200 359 GET http://i1.flogao.com.br/b/18/bondedoexperimenta/ads.js - DIRECT/70.85.51.37 application/x-javascript
1108485766.355 229 10.0.2.0 TCP_MISS/200 2158 GET http://i1.flogao.com.br/b/18/bondedo...a/template.css - DIRECT/70.85.51.37 text/css
1108485766.623 268 10.0.2.0 TCP_MISS/200 913 GET http://i2.flogao.com.br/images/brasil.gif - DIRECT/70.85.51.53 image/gif
1108485766.666 258 10.0.2.0 TCP_MISS/200 2253 GET http://i1.flogao.com.br/b/18/bondedo...nta/avatar.jpg - DIRECT/70.85.51.37 image/jpeg
1108485770.045 3404 10.0.2.0 TCP_MISS/200 306 GET http://i1.flogao.com.br/images/0.gif - DIRECT/70.85.51.37 image/gif
1108485770.175 3493 10.0.2.0 TCP_MISS/200 1903 GET http://s3.flogao.com.br/23/10/04/tb_969699.jpg - DIRECT/70.85.55.149 image/jpeg
1108485770.179 3473 10.0.2.0 TCP_MISS/200 2560 GET http://s2.flogao.com.br/17/10/04/tb_854865.jpg - DIRECT/70.85.51.70 image/jpeg
1108485770.395 3714 10.0.2.0 TCP_MISS/200 3318 GET http://s3.flogao.com.br/15/11/04/tb_1531931.jpg - DIRECT/70.85.55.149 image/jpeg
1108485771.017 839 10.0.2.0 TCP_MISS/200 22905 GET http://s2.flogao.com.br/21/01/05/3963664.jpg - DIRECT/70.85.51.70 image/jpeg
1108485772.994 6230 10.0.2.0 TCP_MISS/200 2404 GET http://pagead2.googlesyndication.com/pagead/show_ads.js - DIRECT/64.233.187.99 text/javascript
1108485773.859 710 10.0.2.0 TCP_MISS/200 1239 GET http://www.flogao.com.br/gc.php? - DIRECT/67.18.200.78 text/html
1108485774.243 799 10.0.2.0 TCP_MISS/200 2286 GET http://pagead2.googlesyndication.com/pagead/ads? - DIRECT/64.233.187.99 text/html
1108485774.448 415 10.0.2.0 TCP_MISS/200 1714 GET http://s4.flogao.com.br/15/02/05/90/tb_5082583.jpg - DIRECT/70.85.55.150 image/jpeg
1108485776.102 9422 10.0.2.0 TCP_MISS/200 1688 GET http://s2.flogao.com.br/21/01/05/tb_3963664.jpg - DIRECT/70.85.51.70 image/jpeg
1108485822.405 1275 10.0.2.0 TCP_MISS/200 2172 GET http://www.flogao.com.br/bondedoexperimenta/foto/969699 - DIRECT/67.18.200.78 text/html
1108485823.505 455 10.0.2.0 TCP_MISS/200 1839 GET http://www.flogao.com.br/gc.php? - DIRECT/67.18.200.78 text/html
1108485827.004 4597 10.0.2.0 TCP_MISS/200 14341 GET http://s3.flogao.com.br/23/10/04/969699.jpg - DIRECT/70.85.55.149 image/jpeg
1108485839.978 368 10.0.1.0 TCP_MISS/302 488 GET http://www.terra.com.br

obrigado a todos os que ajudaram e desculpe o incomodo.

[epf]

e isso ai..
flw