مشکل با راه اندازی اسکوئید

**VPSLnet** · 2007-08-06, 10:49 AM

سلام
اسکوئید رو رو یه ردهت اینترپرایس 4 نصب کردم با این کانفیگ اما نمیتونم سرویس اسکوئید رو استارت کنم.

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
ipcache_size 16384 #4096
fqdncache_size 16384 #4096

cache_dir ufs /cache1 20000 16 256

acl nimda1 urlpath_regex -i \.elm$
acl nimda2 urlpath_regex -i root.exe
acl nimda3 urlpath_regex -i cmd.exe
acl nimda4 urlpath_regex -i ^http://.*www
acl nimda5 urlpath_regex -i readme.exe
acl nimda6 urlpath_regex -i default.id
acl nimda7 urlpath_regex -i :25

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563

acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http

acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost

http_access deny nimda1
http_access deny nimda2
http_access deny nimda3
http_access deny nimda4
http_access deny nimda5
http_access deny nimda6
http_access deny nimda7

http_access allow all

icp_access allow all
httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
ie_refresh on

cache_mem 2048 MB # 8 MB
maximum_object_size 20 MB # 4096 KB
maximum_object_size_in_memory 256 KB # 8 KB
dns_nameservers 4.2.2.4 192.9.9.3
request_header_max_size 100 KB # 10 KB
request_timeout 120 second # 30 seconds

refresh_pattern -i ^ftp: 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.gif$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.jpg$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.html$ 20160 50 22160 override-expire override-lastmod
refresh_pattern -i \.htm$ 20160 50 22160 override-expire override-lastmod
refresh_pattern -i \.class$ 20160 90 43200 override-expire override-lastmod

refresh_pattern -i \.zip$ 20160 90 43200 override-expire override-lastmod

refresh_pattern -i \.jpeg$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.mid$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.shtml$ 20160 50 22160 override-expire override-lastmod
refresh_pattern -i \.exe$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.thm$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.wav$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.txt$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.cab$ 20160 90 43200 override-expire override-lastmod

refresh_pattern -i \.au$ 20160 90 43200 override-expire override-lastmod

refresh_pattern -i \.mov$ 20160 90 43200 override-expire override-lastmod

refresh_pattern -i \.xbm$ 20160 90 43200 override-expire override-lastmod

refresh_pattern -i \.ram$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.avi$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.chtml$ 20160 50 22160 override-expire override-lastmod
refresh_pattern -i \.thb$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.dcr$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.bmp$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.phtml$ 20160 50 22160 override-expire override-lastmod
refresh_pattern -i \.mpg$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.pdf$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.art$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.swf$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.mp3$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.ra$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.spl$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.viv$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.doc$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.gz$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.Z$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.tgz$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.tar$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.vrm$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.vrml$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.aif$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.aifc$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.aiff$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.arj$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.c$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.cpt$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.dir$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.dxr$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.hqx$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.jpe$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.lha$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.lzh$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.midi$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.movie$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.mp2$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.mpe$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.mpeg$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.mpga$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.pl$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.ppt$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.ps$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.qt$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.qtm$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.ras$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.sea$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.sit$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.tif$ 20160 90 43200 override-expire override-lastmod
refresh_pattern -i \.tiff$ 20160 90 43200 override-expire override-lastmod
refresh_pattern . 20160 90 43200 override-expire override-lastmod

hierarchy_stoplist cgi-bin ?

این هم محتویات rc.local

#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don't
# want to do the full Sys V style init stuff.

iptables -A PREROUTING -p tcp -t nat -d 217.218.236.162/27 --dport 80 -j DROP
iptables -A PREROUTING -p tcp -t nat -s 217.218.236.160/27 --dport 80 -j REDIRECT --to 3128
iptables -A PREROUTING -p tcp -t nat --dport 80 -j DROP

touch /var/lock/subsys/local

این هم sysctl.conf

# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
# sysctl.conf(5) for more details.

# Controls IP packet forwarding
net.ipv4.ip_forward = 1

# Controls source route verification
net.ipv4.conf.default.rp_filter = 1

# Do not accept source routing
net.ipv4.conf.default.accept_source_route = 0

# Controls the System Request debugging functionality of the kernel
kernel.sysrq = 0

# Controls whether core dumps will append the PID to the core filename.
# Useful for debugging multi-threaded applications.
kernel.core_uses_pid = 1
~
~
~
"/etc/sysctl.conf" 20L, 604C

chown squid.squid /cache1
squid -z
بعد از تمام این مراحل سرویس اسکوئید ریستارت نمیشه اما cache_dir ufs /cache1 20000 16 256 رو که از کانفیگ برمیدارم ریستارت میشه. !!!
بعدش هم که کار میده فقط کاربرهای lan با ست کردن پراکسی کار میکنن و dialup ها page باز نمیکنن .
به نظر شما ایراد کجاست؟
ممنون.

موضوعات مشابه:

**Alux** · 2007-08-06, 11:51 AM

تـو انجمن پر است از این نوع مشکلات اگه می گشتید بد نبود

لطفا خروجی دستور squid -z رو اینجا بگذارید

**VPSLnet** · 2007-08-06, 05:01 PM

نوشته اصلی توسط Alux

تـو انجمن پر است از این نوع مشکلات اگه می گشتید بد نبود

لطفا خروجی دستور squid -z رو اینجا بگذارید

[root@localhost ~]# squid -z
2007/08/06 16:59:47| Creating Swap Directories

**adel28** · 2007-08-06, 08:23 PM

خسرو جان
این که درسته.
جواب service squid start رو اینجا بزار.

**darklove** · 2007-08-06, 09:18 PM

کد:

cache_mem 2048 MB # 8 MB
maximum_object_size 20 MB # 4096 KB
maximum_object_size_in_memory 256 KB # 8 KB
dns_nameservers 4.2.2.4 192.9.9.3
request_header_max_size 100 KB # 10 KB
request_timeout 120 second # 30 seconds

مشکل از این خطهاست
SELinux چک کن

**VPSLnet** · 2007-08-06, 11:03 PM

نوشته اصلی توسط darklove

کد:

cache_mem 2048 MB # 8 MB
maximum_object_size 20 MB # 4096 KB
maximum_object_size_in_memory 256 KB # 8 KB
dns_nameservers 4.2.2.4 192.9.9.3
request_header_max_size 100 KB # 10 KB
request_timeout 120 second # 30 seconds

مشکل از این خطهاست
SELinux چک کن

سلام.
به چه صورت باید اصلاح کنم ؟

**offers2you** · 2007-08-07, 12:05 AM

با سلام
پارامتر داده شده به enable-storeio-- را با استفاده از دستور squid -v |grep --color enable-storeio اینجا بگذارید ... تا بررسی شود ...
موفق باشید ...

**VPSLnet** · 2007-08-07, 04:07 PM

دوستان اگه امکان داره یه کانفیگ بدون اشکال رو لطف کنن تا تست کنم

گذشته از این موضوع زمانی که
cache_dir ufs /cache1 20000 16 256
رو بر میدارم اسکوئید کار میده اما فقط برای کاربران lan و dialup ها همچنان بی بهره !!

**darklove** · 2007-08-07, 05:41 PM

ACL

**offers2you** · 2007-08-07, 08:25 PM

با سلام
دوست عزیز ظاهرا پاسخ حقیر کمرنگ بود که ظاهرا نگاهی هم به آن نکردید !
خروجی دستور زیر را اینجا بگذارید تا در مورد آن خط که مشکل ساز شده راه حل را بیابیم !

squid -v |grep --color enable-storeio

در صورت امکان کانفیگ را هم لطف بفرمایید
موفق و پیروز باشید ...

**VPSLnet** · 2007-08-08, 08:22 AM

نوشته اصلی توسط offers2you

با سلام
دوست عزیز ظاهرا پاسخ حقیر کمرنگ بود که ظاهرا نگاهی هم به آن نکردید !
خروجی دستور زیر را اینجا بگذارید تا در مورد آن خط که مشکل ساز شده راه حل را بیابیم !

squid -v |grep --color enable-storeio

در صورت امکان کانفیگ را هم لطف بفرمایید
موفق و پیروز باشید ...

[root@localhost ~]# squid -v |grep --color enable-storeio
configure options: --build=i386-redhat-linux --host=i386-redhat-linux --target=i386-redhat-linux-gnu --program-prefix= --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib --libexecdir=/usr/libexec --localstatedir=/var --sharedstatedir=/usr/com --mandir=/usr/share/man --infodir=/usr/share/info --exec_prefix=/usr --bindir=/usr/sbin --libexecdir=/usr/lib/squid --localstatedir=/var --sysconfdir=/etc/squid --enable-poll --enable-snmp --enable-removal-policies=heap,lru --enable-storeio=aufs,coss,diskd,null,ufs --enable-ssl --with-openssl=/usr/kerberos --enable-delay-pools --enable-linux-netfilter --with-pthreads --enable-ntlm-auth-helpers=SMB,winbind --enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_group ,winbind_group --enable-auth=basic,ntlm --with-winbind-auth-challenge --enable-useragent-log --enable-referer-log --disable-dependency-tracking --enable-cachemgr-hostname=localhost --disable-ident-lookups --enable-truncate --enable-underscores --datadir=/usr/share --enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL,winbind
[root@localhost ~]#

version 12.2
service nagle
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
no logging console
logging monitor warnings
aaa new-model
aaa authentication ppp default none
aaa authentication ppp isputil group radius local
aaa authorization network default none
aaa authorization network isputil group radius local
aaa accounting send stop-record authentication failure
aaa accounting update newinfo periodic 1
aaa accounting network default none
aaa accounting network isputil start-stop group radius
aaa pod server auth-type any server-key 565856
!
ip subnet-zero
no ip domain-lookup
ip name-server 217.218.127.104
ip name-server 192.9.9.3
!
interface FastEthernet0/0
ip address 217.218.6.2 255.255.255.224 secondary
ip address 10.0.0.1 255.255.255.0
ip nat inside
ip policy route-map cache
load-interval 30
speed auto
full-duplex
no cdp enable
!
interface Serial0/0
ip unnumbered FastEthernet0/0
ip access-group 150 out
ip nat outside
encapsulation ppp
no ip mroute-cache
load-interval 30
no keepalive
no fair-queue
serial restart-delay 0
no cdp enable
!
interface Group-Async1
ip unnumbered FastEthernet0/0
ip access-group 160 in
ip nat inside
encapsulation ppp
ip tcp header-compression passive
ip policy route-map cache
load-interval 30
async default routing
async mode dedicated
peer default ip address pool Dial-up
ppp authentication pap isputil
ppp authorization isputil
ppp accounting isputil
group-range 33 62
!
interface Group-Async2
ip unnumbered FastEthernet0/0
ip access-group 160 in
ip nat inside
encapsulation ppp
ip tcp header-compression passive
ip policy route-map cache
load-interval 30
async default routing
async mode dedicated
peer default ip address pool Dial-up
ppp authentication pap isputil
ppp authorization isputil
ppp accounting isputil
group-range 63 64
!
ip local pool Dial-up 10.0.0.101 10.0.0.133
ip nat pool POP 217.218.6.2 217.218.6.2 netmask 255.255.255.224
ip nat inside source list 102 pool POP overload
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0
no ip http server
ip http authentication local
!
access-list 100 permit ip any any
access-list 102 permit ip 10.0.0.0 0.0.0.255 any
access-list 102 deny ip any any
access-list 105 deny ip host 217.218.6.3 any
access-list 105 permit tcp 10.0.0.0 0.0.0.255 any eq www
access-list 105 permit tcp 217.218.6.0 0.0.0.31 any eq www
access-list 128 permit tcp any any eq www
access-list 150 deny udp any any eq 1434
access-list 150 deny udp any any eq 1433
access-list 150 deny tcp any any eq 1434
access-list 150 deny tcp any any eq 1433
access-list 150 deny udp any eq 1434 any
access-list 150 deny udp any eq 1433 any
access-list 150 deny tcp any eq 1434 any
access-list 150 deny tcp any eq 1433 any
access-list 150 deny udp any any eq tftp
access-list 150 deny tcp any any eq 135
access-list 150 deny udp any any eq 135
access-list 150 deny tcp any any eq 139
access-list 150 deny tcp any eq 139 any
access-list 150 deny udp any any eq netbios-ss
access-list 150 deny tcp any any eq 445
access-list 150 deny udp any any eq 445
access-list 150 deny tcp any any eq 593
access-list 150 deny tcp any any eq 4444
access-list 150 deny udp any any eq ntp
access-list 150 deny udp any any eq 995
access-list 150 deny udp any any eq 996
access-list 150 deny udp any any eq 997
access-list 150 deny udp any any eq 998
access-list 150 deny udp any any eq 999
access-list 150 deny udp any any eq 8998
access-list 150 deny udp any eq 8998 any
access-list 150 permit ip 217.218.6.0 0.0.0.31 any
access-list 150 permit ip 10.0.0.0 0.0.0.255 any
access-list 150 deny ip any any
access-list 160 deny udp any any eq 1434
access-list 160 deny udp any any eq 1433
access-list 160 deny tcp any any eq 1434
access-list 160 deny tcp any any eq 1433
access-list 160 deny udp any any eq tftp
access-list 160 deny tcp any any eq 135
access-list 160 deny udp any any eq 135
access-list 160 deny tcp any any eq 139
access-list 160 deny udp any any eq netbios-ss
access-list 160 deny tcp any any eq 445
access-list 160 deny udp any any eq 445
access-list 160 deny tcp any any eq 5554
access-list 160 deny tcp any any eq 9996
access-list 160 deny tcp any any eq 593
access-list 160 deny tcp any any eq 4444
access-list 160 deny udp any any eq ntp
access-list 160 deny udp any any eq 995
access-list 160 deny udp any any eq 996
access-list 160 deny udp any any eq 997
access-list 160 deny udp any any eq 998
access-list 160 deny udp any any eq 999
access-list 160 deny udp any any eq 8998
access-list 160 permit ip 217.218.6.0 0.0.0.31 any
access-list 160 permit ip 10.0.0.0 0.0.0.255 any
access-list 160 deny ip any any
no cdp run
route-map cache permit 2
match ip address 105
set ip next-hop 217.218.6.3
!

radius-server host 2.2.2.2 auth-port 5555 acct-port 6667
radius-server retransmit 5
radius-server timeout 10
radius-server key 7 000000000000
radius-server vsa send accounting
radius-server vsa send authentication
!
line con 0
line 33 52
login authentication dial-in
modem answer-timeout 10
modem InOut
modem autoconfigure type USR
transport input all
stopbits 1
speed 115200
flowcontrol hardware
line 53 64
login authentication dial-in
modem answer-timeout 10
modem InOut
modem autoconfigure type default
transport input all
stopbits 1
speed 115200
flowcontrol hardware
line aux 0
line vty 0 4
access-class 102 in
line vty 5 15
access-class 102 in
!
end

بنده قصد جسارت نداشتم.

**darklove** · 2007-08-08, 09:45 AM

من نفهمیدم این پست مربوطه به Squid یا Cisco

موضوع: مشکل با راه اندازی اسکوئید

پیوند

ابزارهای موضوع

نمایش

مشکل با راه اندازی اسکوئید

کلمات کلیدی در جستجوها:

net.ipv4.ip_forward=1

برچسب برای این موضوع

مجوز های ارسال و ویرایش