[FUG-BR] Squid - Proxy transparente não funciona

[Fred Dallalana]

Bruno,

Pelo log parece que o squid não está rodando.

Outra coisa, no log aparece a versão 5 e no squid -v a versão 6 ??? ta 
estranho isso.

Verifique também as permissões dos diretórios e arquivos de logs e cache do 
squid....


----- Original Message ----- 
From: <brunounixuser at aol.com>
To: <freebsd at fug.com.br>
Sent: Wednesday, May 30, 2007 9:51 AM
Subject: Re: [FUG-BR] Squid - Proxy transparente não funciona


Srs,

Primeiramente gostaria de agradecer a lista pela ajuda. Porém não
resolveu o problema, o proxy transparente continua sem funcionar.
Depois de tantas alterações eis a situação atual:

[root at firewall ~]# ipfw list
00800 fwd 127.0.0.1,3128 tcp from 192.168.1.0/24 to any dst-port 80
65535 allow ip from any to any

[root at firewall ~]# squid -v
Squid Cache: Version 2.6.STABLE12
configure options: '--bindir=/usr/local/sbin'
'--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid'
'--libexecdir=/usr/local/libexec/squid'
'--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid'
'--enable-removal-policies=lru heap' '--disable-linux-netfilter'
'--disable-linux-tproxy' '--disable-epoll' '--enable-auth=basic ntlm
digest' '--enable-basic-auth-helpers=NCSA PAM MSNT SMB YP'
'--enable-digest-auth-helpers=password'
'--enable-external-acl-helpers=ip_user session unix_group wbinfo_group'
'--enable-ntlm-auth-helpers=SMB' '--enable-storeio=ufs diskd null'
'--enable-icmp' '--disable-http-violations' '--enable-arp-acl'
'--enable-pf-transparent' '--enable-kqueue' '--with-large-files'
'--enable-large-cache-files' '--enable-stacktraces'
'--enable-err-languages=Azerbaijani Bulgarian Catalan Czech Danish
Dutch  English Estonian Finnish French German Greek Hebrew  Hungarian
Italian Japanese Korean Lithuanian  Polish Portuguese Romanian
Russian-1251 Russian-koi8-r  Serbian Simplify_Chinese Slovak Spanish
Swedish  Traditional_Chinese Turkish'
'--enable-default-err-language=English' '--prefix=/usr/local'
'i386-portbld-freebsd6.2' 'CC=cc' 'CFLAGS=-O2 -fno-strict-aliasing
-pipe  -g' 'CPPFLAGS=' 'LDFLAGS=' 'build_alias=i386-portbld-freebsd6.2'
'host_alias=i386-portbld-freebsd6.2'
'target_alias=i386-portbld-freebsd6.2'

Linhas descomentadas dentro do squid.conf:

http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_dir ufs /usr/local/squid/cache 100 16 256
access_log /usr/local/squid/logs/access.log squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl our_networks src 192.168.1.0/24
http_access allow our_networks
http_access deny all
http_reply_access allow all
icp_access allow all
visible_hostname sertatransformadores.com.br
always_direct allow all
coredump_dir /usr/local/squid/cache

[root at firewall ~]# tail -f /var/log/squid/cache.log
2007/05/29 16:28:56| Rebuilding storage in /usr/local/etc/squid/cache
(DIRTY)
2007/05/29 16:28:56| Using Least Load store dir selection
2007/05/29 16:28:56| Current Directory is /usr/local/squid/logs
2007/05/29 16:28:56| Loaded Icons.
2007/05/29 16:28:56| commBind: Cannot bind socket FD 11 to
192.168.0.1:3128: (49) Can't assign requested address
FATAL: Cannot open HTTP Port
Squid Cache (Version 2.5.STABLE14): Terminated abnormally.
CPU Usage: 0.020 seconds = 0.010 user + 0.010 sys
Maximum Resident Size: 7516 KB
Page faults with physical i/o: 0

Bem acho que é isso.

Att,
Bruno Oliveira.
________________________________________________________________________
AOL now offers free email to everyone.  Find out more about what's free
from AOL at AOL.com.
=0
-------------------------
Histórico: http://www.fug.com.br/historico/html/freebsd/
Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd