[FUG-BR] Squid - Proxy transparente não funciona

Sábado Junho 2 16:22:23 BRT 2007

2007/5/30, Denis Granato <denisgranato at gmail.com>:
> Tive esse mesmo problema com o 2.6 o transparent nao funcionava
> desisntalei e instalei de novo pelo ports com a opção  make install
> env FLAVOR=transparent
>
> procura certim esse parametro mas é mais ou menos isso
>
> depois o squid .conf coloquei
> http_port 192.168.1.254:3128 transparent
>
> no ipfw
>
> # Proxy Transparente
> ipfw add 100 fwd 127.0.0.1,3128 tcp from 192.168.1.0/24 to any 80 via dc0
>
> # NAT ALL
> ipfw add 65000 divert natd all from any to any via xl0
>
>
>
> On 5/30/07, brunounixuser at aol.com <brunounixuser at aol.com> wrote:
> > Srs,
> >
> > Primeiramente gostaria de agradecer a lista pela ajuda. Porém não
> > resolveu o problema, o proxy transparente continua sem funcionar.
> > Depois de tantas alterações eis a situação atual:
> >
> > [root at firewall ~]# ipfw list
> > 00800 fwd 127.0.0.1,3128 tcp from 192.168.1.0/24 to any dst-port 80
> > 65535 allow ip from any to any
> >
> > [root at firewall ~]# squid -v
> > Squid Cache: Version 2.6.STABLE12
> > configure options: '--bindir=/usr/local/sbin'
> > '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid'
> > '--libexecdir=/usr/local/libexec/squid'
> > '--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid'
> > '--enable-removal-policies=lru heap' '--disable-linux-netfilter'
> > '--disable-linux-tproxy' '--disable-epoll' '--enable-auth=basic ntlm
> > digest' '--enable-basic-auth-helpers=NCSA PAM MSNT SMB YP'
> > '--enable-digest-auth-helpers=password'
> > '--enable-external-acl-helpers=ip_user session unix_group wbinfo_group'
> > '--enable-ntlm-auth-helpers=SMB' '--enable-storeio=ufs diskd null'
> > '--enable-icmp' '--disable-http-violations' '--enable-arp-acl'
> > '--enable-pf-transparent' '--enable-kqueue' '--with-large-files'
> > '--enable-large-cache-files' '--enable-stacktraces'
> > '--enable-err-languages=Azerbaijani Bulgarian Catalan Czech Danish
> > Dutch  English Estonian Finnish French German Greek Hebrew  Hungarian
> > Italian Japanese Korean Lithuanian  Polish Portuguese Romanian
> > Russian-1251 Russian-koi8-r  Serbian Simplify_Chinese Slovak Spanish
> > Swedish  Traditional_Chinese Turkish'
> > '--enable-default-err-language=English' '--prefix=/usr/local'
> > 'i386-portbld-freebsd6.2' 'CC=cc' 'CFLAGS=-O2 -fno-strict-aliasing
> > -pipe  -g' 'CPPFLAGS=' 'LDFLAGS=' 'build_alias=i386-portbld-freebsd6.2'
> > 'host_alias=i386-portbld-freebsd6.2'
> > 'target_alias=i386-portbld-freebsd6.2'
> >
> > Linhas descomentadas dentro do squid.conf:
> >
> > http_port 3128 transparent
> > hierarchy_stoplist cgi-bin ?
> > acl QUERY urlpath_regex cgi-bin \?
> > cache deny QUERY
> > acl apache rep_header Server ^Apache
> > broken_vary_encoding allow apache
> > cache_dir ufs /usr/local/squid/cache 100 16 256
> > access_log /usr/local/squid/logs/access.log squid
> > refresh_pattern ^ftp:           1440    20%     10080
> > refresh_pattern ^gopher:        1440    0%      1440
> > refresh_pattern .               0       20%     4320
> > acl all src 0.0.0.0/0.0.0.0
> > acl manager proto cache_object
> > acl localhost src 127.0.0.1/255.255.255.255
> > acl to_localhost dst 127.0.0.0/8
> > acl SSL_ports port 443
> > acl Safe_ports port 80          # http
> > acl Safe_ports port 21          # ftp
> > acl Safe_ports port 443         # https
> > acl Safe_ports port 70          # gopher
> > acl Safe_ports port 210         # wais
> > acl Safe_ports port 1025-65535  # unregistered ports
> > acl Safe_ports port 280         # http-mgmt
> > acl Safe_ports port 488         # gss-http
> > acl Safe_ports port 591         # filemaker
> > acl Safe_ports port 777         # multiling http
> > acl CONNECT method CONNECT
> > http_access allow manager localhost
> > http_access deny manager
> > http_access deny !Safe_ports
> > http_access deny CONNECT !SSL_ports
> > acl our_networks src 192.168.1.0/24
> > http_access allow our_networks
> > http_access deny all
> > http_reply_access allow all
> > icp_access allow all
> > visible_hostname sertatransformadores.com.br
> > always_direct allow all
> > coredump_dir /usr/local/squid/cache
> >
> > [root at firewall ~]# tail -f /var/log/squid/cache.log
> > 2007/05/29 16:28:56| Rebuilding storage in /usr/local/etc/squid/cache
> > (DIRTY)
> > 2007/05/29 16:28:56| Using Least Load store dir selection
> > 2007/05/29 16:28:56| Current Directory is /usr/local/squid/logs
> > 2007/05/29 16:28:56| Loaded Icons.
> > 2007/05/29 16:28:56| commBind: Cannot bind socket FD 11 to
> > 192.168.0.1:3128: (49) Can't assign requested address
> > FATAL: Cannot open HTTP Port
> > Squid Cache (Version 2.5.STABLE14): Terminated abnormally.
> > CPU Usage: 0.020 seconds = 0.010 user + 0.010 sys
> > Maximum Resident Size: 7516 KB
> > Page faults with physical i/o: 0
> >
> > Bem acho que é isso.
> >
> > Att,
> > Bruno Oliveira.
> > ________________________________________________________________________
> > AOL now offers free email to everyone.  Find out more about what's free
> > from AOL at AOL.com.
> > =0
> > -------------------------
> > Histórico: http://www.fug.com.br/historico/html/freebsd/
> > Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
> >
> -------------------------
> Histórico: http://www.fug.com.br/historico/html/freebsd/
> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>

Denis,

Fiquei curioso com a opcao de compilacao... o que faz o env FLAVOR=transparent?

-- 
Celso Vianna
BSD User: 51318
http://www.bsdcounter.org

63 8404-8559
Palmas/TO