+ Responder ao Tópico



  1. #1
    sando_pira
    o meu squid não esta pegando os ip que estão acessando a internet. o que deve esta acontecendo. minha regra de proxy trans. e esta assim.
    __________________________________________________________
    #proxy trans.
    iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128
    iptables -A INPUT -p TCP -s 10.0.0.0/24 --dport 3128 -m state --state NEW -j ACCEPT

    # NAT Rede Local
    iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o ppp0 -j MASQUERADE
    _____________________________________________________

    e meu squid.conf esta assim.

    _________________________________________
    # NETWORK OPTIONS
    http_port 3128

    hierarchy_stoplist cgi-bin ?

    acl QUERY urlpath_regex cgi-bin \?
    no_cache deny QUERY


    # OPTIONS WHICH AFFECT THE CACHE SIZE
    # -----------------------------------------------------------------------------
    cache_mem 64 MB

    cache_swap_low 90
    cache_swap_high 95

    # LOGFILE PATHNAMES AND CACHE DIRECTORIES
    # -----------------------------------------------------------------------------
    cache_dir ufs /usr/local/squid/var/cache 1024 16 256
    cache_access_log /usr/local/squid/var/logs/access.log

    cache_log /usr/local/squid/var/logs/cache.log

    cache_store_log /usr/local/squid/var/logs/store.log

    emulate_httpd_log on
    log_ip_on_direct on

    mime_table /usr/local/squid/etc/mime.conf
    log_mime_hdrs on

    pid_filename /usr/local/squid/var/logs/squid.pid
    debug_options ALL,1

    client_netmask 255.255.255.0

    # OPTIONS FOR EXTERNAL SUPPORT PROGRAMS
    # -----------------------------------------------------------------------------
    auth_param basic children 5
    auth_param basic realm Squid proxy-caching web server
    auth_param basic credentialsttl 2 hours
    auth_param basic casesensitive off

    # OPTIONS FOR TUNING THE CACHE
    # -----------------------------------------------------------------------------

    #Suggested default:
    refresh_pattern ^ftp: 1440 20% 10080
    refresh_pattern ^gopher: 1440 0% 1440
    refresh_pattern . 0 20% 4320

    # ACCESS CONTROLS
    # -----------------------------------------------------------------------------
    #Examples:
    #acl macaddress arp 09:00:2b:23:45:67
    #acl myexample dst_as 1241
    #acl password proxy_auth REQUIRED
    #acl fileupload req_mime_type -i ^multipart/form-data$
    #acl javascript rep_mime_type -i ^application/x-javascript$
    #
    #Recommended minimum configuration:
    acl all src 0.0.0.0/0.0.0.0
    acl manager proto cache_object
    acl localhost src 127.0.0.1/255.255.255.255
    #acl to_localhost dst 127.0.0.0/8
    acl SSL_ports port 443 563
    acl Safe_ports port 80 # http
    acl Safe_ports port 21 # ftp
    acl Safe_ports port 443 563 # https, snews
    acl Safe_ports port 70 # gopher
    acl Safe_ports port 210 # wais
    acl Safe_ports port 1025-65535 # unregistered ports
    acl Safe_ports port 280 # http-mgmt
    acl Safe_ports port 488 # gss-http
    acl Safe_ports port 591 # filemaker
    acl Safe_ports port 777 # multiling http
    acl CONNECT method CONNECT

    #Minhas Permiçoes de acesso
    acl rede src 10.0.0.0/24
    acl clientes src "/usr/local/squid/etc/controle/clientes"
    acl sites url_regex -i "/usr/local/squid/etc/controle/sites"

    # TAG: http_access
    #Default:
    # http_access deny all
    #
    #Recommended minimum configuration:
    #
    # Only allow cachemgr access from localhost
    http_access allow manager localhost
    http_access deny manager
    # Deny requests to unknown ports
    http_access deny !Safe_ports
    # Deny CONNECT to other than SSL ports
    http_access deny CONNECT !SSL_ports
    #
    #Minhas regras de acesso
    http_access allow clientes
    http_access deny rede !sites

    http_reply_access allow all

    icp_access allow all

    # ADMINISTRATIVE PARAMETERS
    # -----------------------------------------------------------------------------
    #Default:
    cache_effective_user squid
    cache_effective_group squid

    # HTTPD-ACCELERATOR OPTIONS
    # -----------------------------------------------------------------------------
    httpd_accel_host virtual
    httpd_accel_port 80
    httpd_accel_single_host off
    httpd_accel_with_proxy on
    httpd_accel_uses_host_header on

    icon_directory /usr/local/squid/share/icons

    error_directory /usr/local/squid/share/errors/Portuguese

    por valor uma LUZ...

  2. O erro que da não é que aparece apenas a sua subrede não é tipo 10.0.0.0 é isso se for faz o seguinte

    muda essas linhas ai

    essa
    acl localhost src 127.0.0.1/255.255.255.255

    por essa
    acl localhost src 10.0.0.0/24

    e comenta essa acl rede src 10.0.0.0/24
    :@: 6)



  3. client_netmask 255.255.255.255

    :good:

  4. ????????????????????????????????//
    client mask






Tópicos Similares

  1. IPs estranhos no access.log do squid
    Por Slackdi no fórum Servidores de Rede
    Respostas: 3
    Último Post: 12-11-2009, 08:15
  2. Squid paralelo pega somente IP do mk
    Por ThunderBRZ no fórum Redes
    Respostas: 13
    Último Post: 29-05-2009, 01:26
  3. Log do Squid não registra IP corretamente
    Por maganhati no fórum Servidores de Rede
    Respostas: 0
    Último Post: 11-02-2008, 09:45
  4. Estranhos IPS no log do Squid
    Por ifc0nfig no fórum Servidores de Rede
    Respostas: 8
    Último Post: 13-10-2005, 09:26
  5. sarg nao acha o log do squid!
    Por no fórum Servidores de Rede
    Respostas: 2
    Último Post: 08-04-2004, 11:30

Visite: BR-Linux ·  VivaOLinux ·  Dicas-L