Squid não funciona, não encontro erro [RESOLVIDO]

kakashi963
(usa Debian)

Enviado em 14/05/2012 - 15:56h

Olá galera, boa tarde!

Simplesmente não encontro o problema na configuração abaixo, mas não funciona... fala que "o internet explorer não pode exibir a página da web"

uso o pacote squid3. Os arquivos estão criados nas pastas corretas e minha rede é 192.168.0.0/24.

visible_hostname vmFirewall
http_port 3128
cache_mem 700 MB
cache_swap_low 90
cache_swap_high 95
cache_dir ufs /var/spool/squid3 20000 16 256

maximum_object_size 30000 KB
maximum_object_size_in_memory 40 KB


acl antivirus dstdomain "/etc/squid3/acls/antivirus"

acl ipsLiberados src "/etc/squid3/acls/ipsLiberados"

acl ipsLiberadosRestritos src "/etc/squid3/acls/ipsLiberadosRestritos"

acl palavrasBloqueadas url_regex "/etc/squid3/acls/palavrasBloqueadas"

acl sitesLiberados dstdomain "/etc/squid3/acls/sitesLiberados"

acl manager proto cache_object

acl localnet src 192.168.0.0/24
acl localhost src 127.0.0.1/24

acl SSL_ports port 443
acl SSL_ports port 2095
acl SSL_ports port 2082
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl Safe_ports port 445
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports


http_access allow antivirus
http_access allow ipsLiberados
http_access allow ipsLiberadosRestritos !palavrasBloqueadas
http_access allow sitesLiberados !palavrasBloqueadas
http_access allow localnet
http_access allow localhost

http_access deny all

icp_access deny all
htcp_access deny all

hierarchy_stoplist cgi-bin \?

cache_replacement_policy lru
memory_replacement_policy lru

access_log /etc/log/squid3/access.log squid

cache_log /var/log/squid3/cache.log

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1140 0% 1440
refresh_pattern (cgi-bin|\?) 0 0% 0
#refresh_pattern 0 20% 4320

icp_port 3130

#error_directory /usr/share/squid3/errors/Portuguese

coredump_dir /var/spool/squid3

phrich
(usa Slackware)

Enviado em 14/05/2012 - 19:57h

Faça o seguinte:

/etc/init.d/squid3 stop

depois

squid3 -d 10

Ai poste a saída do comando aqui.

kakashi963
(usa Debian)

Enviado em 15/05/2012 - 08:35h

Executei o comando:

2012/05/15 08:34:35| aclIpParseIpData: WARNING: Netmask masks away part of the specified IP in '127.0.0.1/24'
2012/05/15 08:34:35| Starting Squid Cache version 3.1.6 for i486-pc-linux-gnu...
2012/05/15 08:34:35| Process ID 7424
2012/05/15 08:34:35| With 1024 file descriptors available
2012/05/15 08:34:35| Initializing IP Cache...
2012/05/15 08:34:35| DNS Socket created at [::], FD 7
2012/05/15 08:34:35| DNS Socket created at 0.0.0.0, FD 8
2012/05/15 08:34:35| Adding nameserver 192.168.0.253 from /etc/resolv.conf
FATAL: Cannot open '/etc/log/squid3/access.log' because
the parent directory does not exist.
Please create the directory.

lincoln.mac
(usa Ubuntu)

Enviado em 15/05/2012 - 13:34h

=========================================

O erro é porque a pasta squid3 não está criada.

No terminal digite:

sudo mkdir /etc/log/squid3

Se a pasta log também não existir, digite no terminal

sudo mkdir /etc/log

Aí depois digita o primeiro comando que irá funcionar.

kakashi963
(usa Debian)

Enviado em 15/05/2012 - 13:37h

Opa, fiz isso mas ainda não deu certo. Gerou a saida:


root@vmFirewall:/etc/log/squid3# 2012/05/15 13:37:34| Starting Squid Cache version 3.1.6 for i486-pc-linux-gnu...
2012/05/15 13:37:34| Process ID 7855
2012/05/15 13:37:34| With 1024 file descriptors available
2012/05/15 13:37:34| Initializing IP Cache...
2012/05/15 13:37:34| DNS Socket created at [::], FD 7
2012/05/15 13:37:34| DNS Socket created at 0.0.0.0, FD 8
2012/05/15 13:37:34| Adding nameserver 192.168.0.253 from /etc/resolv.conf
FATAL: Cannot open '/etc/log/squid3/access.log' for writing.
The parent directory must be writeable by the
user 'proxy', which is the cache_effective_user
set in squid.conf.


Entretando, o usuário proxy ja existe, e com o comando chown ja atribui a pasta a ele.

andrecanhadas
(usa Debian)

Enviado em 15/05/2012 - 14:08h

execute:

chown proxy.proxy /etc/log/squid3/ -R

chmod -R 774 /etc/log/squid3/ -R

 

kakashi963
(usa Debian)

Enviado em 15/05/2012 - 14:33h

Opa, ta na mão!

2012/05/15 14:32:48| Starting Squid Cache version 3.1.6 for i486-pc-linux-gnu...
2012/05/15 14:32:48| Process ID 8113
2012/05/15 14:32:48| With 1024 file descriptors available
2012/05/15 14:32:48| Initializing IP Cache...
2012/05/15 14:32:48| DNS Socket created at [::], FD 7
2012/05/15 14:32:48| DNS Socket created at 0.0.0.0, FD 8
2012/05/15 14:32:48| Adding nameserver 192.168.0.253 from /etc/resolv.conf
2012/05/15 14:32:49| Unlinkd pipe opened on FD 13
2012/05/15 14:32:49| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2012/05/15 14:32:49| Store logging disabled
2012/05/15 14:32:49| Swap maxSize 20480000 + 716800 KB, estimated 1630523 objects
2012/05/15 14:32:49| Target number of buckets: 81526
2012/05/15 14:32:49| Using 131072 Store buckets
2012/05/15 14:32:49| Max Mem size: 716800 KB
2012/05/15 14:32:49| Max Swap size: 20480000 KB
2012/05/15 14:32:49| Version 1 of swap file with LFS support detected...
2012/05/15 14:32:49| Rebuilding storage in /var/spool/squid3 (DIRTY)
2012/05/15 14:32:49| Using Least Load store dir selection
2012/05/15 14:32:49| Set Current Directory to /var/spool/squid3
2012/05/15 14:32:49| Loaded Icons.
2012/05/15 14:32:49| commBind: Cannot bind socket FD 16 to [::]:3128: (98) Address already in use
FATAL: Cannot open HTTP Port

andrecanhadas
(usa Debian)

Enviado em 15/05/2012 - 15:15h

A porta do squid 3128 já esta em uso.
Ou você troca a porta do seu squid3 ou remove o squid 2.7 que deve estar usando a porta 3128

phrich
(usa Slackware)

Enviado em 15/05/2012 - 15:52h

O erro está na sua máscara:

aclIpParseIpData: WARNING: Netmask masks away part of the specified IP in '127.0.0.1/24'


Troque de 127.0.0.1/24 para 127.0.0.1/32

E então faça o mesmo comando que eu lhe falei, se não houver mais erros, ele irá funcionar perfeitamente.

kakashi963
(usa Debian)

Enviado em 15/05/2012 - 16:06h

Obrigado pela colaboração, mas a coisa ta feia mesmo.

Alterei a porta no squid.conf e no iptables da 3128 para 8080, ainda não funciona.

O resultado agora do comando é:


root@vmFirewall:/etc/squid3# 2012/05/15 15:56:36| Starting Squid Cache version 3 .1.6 for i486-pc-linux-gnu...
2012/05/15 15:56:36| Process ID 1336
2012/05/15 15:56:36| With 1024 file descriptors available
2012/05/15 15:56:36| Initializing IP Cache...
2012/05/15 15:56:36| DNS Socket created at [::], FD 7
2012/05/15 15:56:36| DNS Socket created at 0.0.0.0, FD 8
2012/05/15 15:56:36| Adding nameserver 192.168.0.253 from /etc/resolv.conf
2012/05/15 15:56:36| Unlinkd pipe opened on FD 13
2012/05/15 15:56:36| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2012/05/15 15:56:36| Store logging disabled
2012/05/15 15:56:36| Swap maxSize 20480000 + 716800 KB, estimated 1630523 object s
2012/05/15 15:56:36| Target number of buckets: 81526
2012/05/15 15:56:36| Using 131072 Store buckets
2012/05/15 15:56:36| Max Mem size: 716800 KB
2012/05/15 15:56:36| Max Swap size: 20480000 KB
2012/05/15 15:56:36| Version 1 of swap file with LFS support detected...
2012/05/15 15:56:36| Rebuilding storage in /var/spool/squid3 (CLEAN)
2012/05/15 15:56:36| Using Least Load store dir selection
2012/05/15 15:56:36| Set Current Directory to /var/spool/squid3
2012/05/15 15:56:36| Loaded Icons.
2012/05/15 15:56:36| Accepting HTTP connections at [::]:8080, FD 16.
2012/05/15 15:56:36| Accepting ICP messages at [::]:3130, FD 17.
2012/05/15 15:56:36| HTCP Disabled.
2012/05/15 15:56:36| Squid modules loaded: 0
2012/05/15 15:56:36| Adaptation support is off.
2012/05/15 15:56:36| Ready to serve requests.
2012/05/15 15:56:36| Done reading /var/spool/squid3 swaplog (18 entries)
2012/05/15 15:56:36| Finished rebuilding storage from disk.
2012/05/15 15:56:36| 18 Entries scanned
2012/05/15 15:56:36| 0 Invalid entries.
2012/05/15 15:56:36| 0 With invalid flags.
2012/05/15 15:56:36| 18 Objects loaded.
2012/05/15 15:56:36| 0 Objects expired.
2012/05/15 15:56:36| 0 Objects cancelled.
2012/05/15 15:56:36| 0 Duplicate URLs purged.
2012/05/15 15:56:36| 0 Swapfile clashes avoided.
2012/05/15 15:56:36| Took 0.03 seconds (550.69 objects/sec).
2012/05/15 15:56:36| Beginning Validation Procedure
2012/05/15 15:56:36| Completed Validation Procedure
2012/05/15 15:56:36| Validated 61 Entries
2012/05/15 15:56:36| store_swap_size = 208
2012/05/15 15:56:37| storeLateRelease: released 0 objects

phrich
(usa Slackware)

Enviado em 15/05/2012 - 16:12h

Agora não teve nenhum erro, mesmo assim não funcionou?