[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RES: Squid3 dando Erro



Bom dia galera removi  a linha acl all src 0.0.0.0/0.0.0.0  conforme o colega Geraldo oriento. Mas agora esta dando o seguinte erro “Restarting Squid HTTP Proxy 3.0: squid3 failed!”

Mas o estranho que funciono logo no inicio basto eu acrescenta um site na lista de bloqueados ele para de funciona. Apaguei o site que eu tinha adicionado a lista e ainda continuo dando o mesmo erro.

 

Esse é o exemplo da minha lista

 

.*sex*

.*playboy*

.*gay*

.*erotico*

.*crack*

.*cassino*

.*pedofilia*

.*casados*

.*encontros*

.*fofoca*

.*seducao*

.ebuddy.com

.youtube.com

.ofuxico.com

.orkut.com

.*tufao*

.*brasileirinhas*

.*pombaloca*

.*belladasemana*

.*paparazzo*

.*messenger*

.*msn*

.*proxy*

.*porn*

.*movie*

.*bangs*

 

Lembrando que segui o procedimento  “squid3 stop e start antes de efetuar qual alteração.  E o mais estranho ainda que depois que reiniciei o Server volto tudo ao normal. Basta eu efetuar qualquer modificação no squid que da esse erro até mesmo mudar a linha http_access allow all para http_access deny all.

 

Ágüem sabe o que pode ser isso?

 

 

http_port 3128 transparent

hierarchy_stoplist cgi-bin ?

acl QUERY urlpath_regex cgi-bin \?

cache deny QUERY

 

acl manager proto cache_object

acl localhost src 127.0.0.1/255.255.255.255

acl to_localhost dst 127.0.0.0/8

acl SSL_ports port 443 # https

acl SSL_ports port 563 # snews

acl SSL_ports port 873 # rsync

acl Safe_ports port 80 # http

acl Safe_ports port 21 # ftp

acl Safe_ports port 443 # https

acl Safe_ports port 70 # gopher

acl Safe_ports port 210 # wais

acl Safe_ports port 1025-65535 # unregistered ports

acl Safe_ports port 280 # http-mgmt

acl Safe_ports port 488 # gss-http

acl Safe_ports port 591 # filemaker

acl Safe_ports port 777 # multiling http

acl Safe_ports port 631 # cups

acl Safe_ports port 873 # rsync

acl Safe_ports port 901 # SWAT

acl purge method PURGE

acl CONNECT method CONNECT

acl our_networks src 192.168.0.0/24"

 

# Listas de sites permitidos e proibidos

# acl permitido url_regex -i "/etc/squid3/permitido.txt"

acl proibido url_regex -i "/etc/squid3/proibido.txt"

 

http_access allow manager localhost

http_access deny manager

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

# http_access allow localhost

# http_access deny purge

# http_access allow purge localhost

 

# http_access allow permitido

  http_access deny proibido

 

  http_access allow all

# http_reply_access allow all

# http_access allow our_networks

  icp_access allow all

  miss_access allow all

 

cache_mgr alanbraw@gmail.com

cache_effective_user proxy

cache_effective_group proxy

visible_hostname Debian

error_directory /usr/share/squid3/errors/Portuguese

coredump_dir /var/spool/squid3

 

 

 

De: Geraldo Neto [mailto:geraneto.java@gmail.com]
Enviada em: segunda-feira, 27 de julho de 2009 08:49
Para: alanbrawdebian@gmail.com
Cc: debian-user-portuguese@lists.debian.org
Assunto: Re: Squid3 dando Erro

 

Caro colega de luta, no squid3 acl all src 0.0.0.0/0.0.0.0 nao funciona basta vc remove-la.

 

 

 

2009/7/26 <alanbrawdebian@gmail.com>

Boa Note pessoal.

 

Estou em mais uma batalho e em busca de aprimorar mais ainda a inda o meu conhecimento no debian, a cada dia  uma nova conquista no meu primeiro servidor e a cada dia um desafio desta vez estou  enfrentado mais uma dificuldade em configurar o meu primeiro Proxy.

 

Ágüem pode me ajudar? O que estou fazendo de errado desta vez? Dota vez que inicio o squid da esse erro abaixo.. sem falara que ele esta bloqueando todas as paginas.

 

 

 

debian:~# /etc/init.d/squid3 start

Starting Squid HTTP Proxy 3.0: squid32009/07/26 23:48:41| WARNING: '0.0.0.0/0.0.0.0' is a subnetwork of '0.0.0.0/0.0.0.0'

2009/07/26 23:48:41| WARNING: because of this '0.0.0.0/0.0.0.0' is ignored to keep splay tree searching predictable

2009/07/26 23:48:41| WARNING: You should probably remove '0.0.0.0/0.0.0.0' from the ACL named 'all'

 

 

 

 

Segue a Minha configuração

 

 

http_port 3128 transparent

 

hierarchy_stoplist cgi-bin ?

 

acl QUERY urlpath_regex cgi-bin \?

cache deny QUERY

 

acl apache rep_header Server ^Apache

 

cache_mem 32 MB

 

cache_swap_low 90

cache_swap_high 95

 

maximum_object_size 4096 KB

 

minimum_object_size 0 KB

 

maximum_object_size_in_memory 8 KB

 

cache_dir ufs /var/spool/squid3 5000 16 256

 

access_log /var/log/squid3/access.log squid

cache_log /var/log/squid3/cache.log

cache_store_log /var/log/squid3/store.log

pid_filename /var/log/squid3/squid3.pid

 

mime_table /usr/share/squid3/mime.conf

 

hosts_file /etc/hosts

 

refresh_pattern ^ftp: 1440 20% 10080

refresh_pattern ^gopher: 1440 0% 1440

refresh_pattern . 0 20% 4320

 

 

acl all src 0.0.0.0/0.0.0.0

acl manager proto cache_object

acl localhost src 127.0.0.1/255.255.255.255

acl to_localhost dst 127.0.0.0/8

acl SSL_ports port 443 # https

acl SSL_ports port 563 # snews

acl SSL_ports port 873 # rsync

acl Safe_ports port 80 # http

acl Safe_ports port 21 # ftp

acl Safe_ports port 443 # https

acl Safe_ports port 70 # gopher

acl Safe_ports port 210 # wais

acl Safe_ports port 1025-65535 # unregistered ports

acl Safe_ports port 280 # http-mgmt

acl Safe_ports port 488 # gss-http

acl Safe_ports port 591 # filemaker

acl Safe_ports port 777 # multiling http

acl Safe_ports port 631 # cups

acl Safe_ports port 873 # rsync

acl Safe_ports port 901 # SWAT

acl purge method PURGE

acl CONNECT method CONNECT

acl our_networks src 192.168.0.0/24"

 

 

# Listas de sites permitidos e proibidos

acl permitido url_regex -i "/etc/squid3/permitido.txt"

acl proibido url_regex -i "/etc/squid3/proibido.txt"

 

 

 

http_access allow manager localhost 

http_access deny manager            

http_access deny !Safe_ports        

http_access deny CONNECT !SSL_ports

http_access allow localhost

 

 

http_access deny purge

http_access allow purge localhost

http_access deny proibido            

http_access deny all

http_reply_access allow all

http_access allow our_networks       

 

 

icp_access allow all

 

cache_mgr alanbraw@gmail.com

 

cache_effective_user proxy

cache_effective_group proxy

 

visible_hostname Debian

 

error_directory /usr/share/squid3/errors/Portuguese

 

coredump_dir /var/spool/squid3

 

 

 

 

 

 

No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.392 / Virus Database: 270.13.34/2268 - Release Date: 07/28/09 06:00:00


Reply to: