Squid não funciona

**w00dy** · 15-03-2005, 11:15

Pessoal, atualizei meu squid pelo apt-get no debian e o desgraçado parou de funcionar.. não bloqueava nada, aí me batí que nem louco e agora bloqueia tudo, não sei mais o que fazer.. Segue meu squid.conf

http_port 3128

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

cache_mem 16 MB

maximum_object_size_in_memory 64 KB

maximum_object_size 16 MB
minimum_object_size 0 KB

cache_swap_low 90
cache_swap_high 95

cache_dir ufs /var/spool/squid 512 16 256

cache_access_log /var/log/squid/access.log
visible_hostname debian

ftp_user [email protected]

refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost

acl proibidos dstdom_regex "/etc/squid/proibidos"
http_access deny proibidos

acl redelocal src 192.168.1.0/24
http_access allow redelocal

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

doidoht · 15-03-2005, 11:28

já verificou o firewall!? os logs!? dá uma olhada lá, de repente tem alguma coisa que pode te ajudar pq seu código tá ok...

T+

**w00dy** · 15-03-2005, 15:17

Postado originalmente por doidoht

já verificou o firewall!? os logs!? dá uma olhada lá, de repente tem alguma coisa que pode te ajudar pq seu código tá ok...

T+

Onde acho os logs? Achei um squid.log.1.. É esse?

Eu não preciso abrir a porta 3128 no firewall?

**matheus_linux** · 15-03-2005, 15:34

Tente!!
Remover o pacote e instalar de novo!!!!!!

**w00dy** · 15-03-2005, 16:02

Postado originalmente por matheus_linux

Tente!!
Remover o pacote e instalar de novo!!!!!!

Vixi.. já tentei isso umas trinta vezes.. pra vc ter uma idéia, eu já reinstalei o debian todo..

**w00dy** · 15-03-2005, 17:04

olha o que acontece se eu rodo em modo debug

$squid -d 3
2005/03/15 17:02:07| Starting Squid Cache version 2.5.STABLE9 for i386-debian-linux-gnu...
2005/03/15 17:02:07| Process ID 27836
2005/03/15 17:02:07| With 1024 file descriptors available
2005/03/15 17:02:07| Performing DNS Tests...
2005/03/15 17:02:07| Successful DNS name lookup tests...
2005/03/15 17:02:07| DNS Socket created at 0.0.0.0, port 32790, FD 5
2005/03/15 17:02:07| Adding nameserver 200.215.1.44 from /etc/resolv.conf
2005/03/15 17:02:07| User-Agent logging is disabled.
2005/03/15 17:02:07| Referer logging is disabled.
2005/03/15 17:02:07| ALERT: setgid: (1) Operation not permitted
2005/03/15 17:02:07| Unlinkd pipe opened on FD 10
2005/03/15 17:02:07| Swap maxSize 524288 KB, estimated 40329 objects
2005/03/15 17:02:07| Target number of buckets: 2016
2005/03/15 17:02:07| Using 8192 Store buckets
2005/03/15 17:02:07| Max Mem size: 16384 KB
2005/03/15 17:02:07| Max Swap size: 524288 KB
2005/03/15 17:02:07| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2005/03/15 17:02:07| Rebuilding storage in /var/spool/squid (DIRTY)
2005/03/15 17:02:07| Using Least Load store dir selection
2005/03/15 17:02:07| Current Directory is /home/debian
2005/03/15 17:02:07| Loaded Icons.
2005/03/15 17:02:08| commBind: Cannot bind socket FD 11 to *:3128: (98) Address already in use
2005/03/15 17:02:08| ALERT: setgid: (1) Operation not permitted
FATAL: Cannot open HTTP Port

buribai · 16-03-2005, 17:56

Postado originalmente por 5hu7d0wn

Pessoal, atualizei meu squid pelo apt-get no debian e o desgraçado parou de funcionar.. não bloqueava nada, aí me batí que nem louco e agora bloqueia tudo, não sei mais o que fazer.. Segue meu squid.conf

http_port 3128

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

cache_mem 16 MB

maximum_object_size_in_memory 64 KB

maximum_object_size 16 MB
minimum_object_size 0 KB

cache_swap_low 90
cache_swap_high 95

cache_dir ufs /var/spool/squid 512 16 256

cache_access_log /var/log/squid/access.log
visible_hostname debian

ftp_user [email protected]

refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost

acl proibidos dstdom_regex "/etc/squid/proibidos"
http_access deny proibidos

acl redelocal src 192.168.1.0/24
http_access allow redelocal

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

--------------------------------------------------------------------

Faça isso :

acl proibidos url_regex -i "/etc/squid/proibidos"
acl redelocal src 192.168.1.0/24
http_access deny proibidos
http_access allow redelocal
http_access deny all

**w00dy** · 17-03-2005, 07:39

Cara.. não deu certo.. Não sei mais o que fazer..
Vou tentar começar do zero denovo, vou reinstalar o seridor...

Squid não funciona

Ferramentas de Tópicos