01 02

Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

1. Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

px
(usa Debian)

Enviado em 16/01/2014 - 00:12h

Ae galera, tou com essa bomba de squid que instalei aqui para fazer uns bloqueios usando ele e o DG, mas nem o squid sozinho eu to conseguindo fazer subir...

Instalei via repositório por se tratar de uma distro RR. Vou tentar colocar o max. de dados para ajudar alguém que possa me ajudar :D

Squid versão 3.4.2-1, meu ip é 192.168.254.1, dns local provido pelo modem/roteador que esta em 192.168.254.254 usando o primeiro dns da operadora e o segundo dns do google e squid na porta 3128.

Script de básico iptables para os testes

#!/bin/bash



# Limpando tabelas

iptables -F

iptables -X

iptables -t nat -F

iptables -t nat -X



# Configurando as políticas padrões

iptables -P INPUT DROP

iptables -P OUTPUT ACCEPT

iptables -P FORWARD ACCEPT

 

#-------------------------------------------------

# || INICIALIZANDO COMPARTILHAMENTO DE INTERNET ||

#-------------------------------------------------



iptables -t nat -A POSTROUTING -o enp1s8 -j MASQUERADE



echo 1 > /proc/sys/net/ipv4/ip_forward

 

#--------------------------------------------

# || INICIANDO ROTEAMENTO PARA PROXY SQUID ||

#--------------------------------------------

 

#------ port 80

iptables -t nat -A PREROUTING -s 192.168.254.1 -p tcp --dport 80 -j REDIRECT --to-port 3128

 

#------ port 443

iptables -t nat -A PREROUTING -s 192.168.254.1 -p tcp --dport 443 -j REDIRECT --to-port 3128



#------ port 3128

iptables -A INPUT -p tcp --dport 3128 -j ACCEPT

iptables -A INPUT -p udp --dport 53 -j ACCEPT

 

#--------------------------------------

# || BLOQUEIO DE PINGS E IP SPOOFING ||

#--------------------------------------

#

iptables -A INPUT -p icmp --icmp-type echo-request -j DROP

echo 1 > /proc/sys/net/ipv4/conf/default/rp_filter

iptables -A INPUT -m state --state INVALID -j DROP

#

 

#----------------------------------

# || ABRIR  A INTERFACE LOOPBACK ||

#----------------------------------

# Permitindo loopback

iptables -A INPUT -i lo -j ACCEPT

Squid.conf

## Squid.conf - Configurado por PX



http_port 3128 intercept



#Memória do cache

cache_mem 256 MB



#Usar o máximo de memória possível

memory_pools on

memory_pools_limit 256 MB



#Tamanho máximo de arquivos alocados na RAM

maximum_object_size_in_memory 256 KB



#Diretório do cache - Tamanho em MB do cache em disco (esta como 4GB altere se necessário) - número de pastas - número de subpastas

cache_dir ufs /var/spool/squid3 256 16 256



#Porcentagem de atualização do cache -limpo ao atingir o máximo

cache_swap_low 85

cache_swap_high 95



#Maximo e Minimo armazenados no disco

maximum_object_size 10 MB

minimum_object_size 1024 KB



#Diretório de erros

error_directory /var/log/squid/errors/Portuguese



#Log

cache_access_log /var/log/squid/access.log



refresh_pattern ^ftp: 15 20% 2280

refresh_pattern ^gopher: 15 0% 2280

refresh_pattern . 15 20% 2280



# Portas Liberadas

acl SSL_ports port 443

acl Safe_ports port 443 # https

acl Safe_ports port 80 # http

acl Safe_ports port 1025-65535 # unregistered ports

acl CONNECT method CONNECT



http_access deny !Safe_ports



## REGRAS ##



#ACL PARA CONEXAO METODO SSL

acl CONNECT method CONNECT

http_access deny CONNECT !SSL_ports

  

#ACL PARA LIBERACAO TOTAL POR MAC

#acl mac_liberados arp "/etc/squid/mac_liberados"

 

#ACL PARA SITES LIBERADOS

#acl sites_liberados url_regex -i "/etc/squid/sites_liberados"



#ACL PARA SITES BLOQUEADOS

#acl sites_bloqueados url_regex -i "/etc/squid/sites_bloqueados"



#ACL REDE LOCAL

acl rede_local src 192.168.254.0/24



# Liberando Acessos

http_access allow localhost

http_access allow rede_local

#http_access allow mac_liberados

#http_access allow sites_liberados



# Negando Acessos

#http_access deny sites_bloqueados

http_access deny all

E meu "log de erros" (/var/log/squid/cache.log):

2014/01/15 23:54:53 kid1| Current Directory is /

2014/01/15 23:54:53 kid1| Starting Squid Cache version 3.4.2 for x86_64-unknown-linux-gnu...

2014/01/15 23:54:53 kid1| Process ID 29541

2014/01/15 23:54:53 kid1| Process Roles: worker

2014/01/15 23:54:53 kid1| With 1024 file descriptors available

2014/01/15 23:54:53 kid1| Initializing IP Cache...

2014/01/15 23:54:53 kid1| DNS Socket created at [::], FD 8

2014/01/15 23:54:53 kid1| DNS Socket created at 0.0.0.0, FD 9

2014/01/15 23:54:53 kid1| Adding nameserver 192.168.254.254 from /etc/resolv.conf

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_ACCESS_DENIED': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_CACHE_ACCESS_DENIED': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_CACHE_MGR_ACCESS_DENIED': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_FORWARDING_DENIED': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_NO_RELAY': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_CANNOT_FORWARD': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_READ_TIMEOUT': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_LIFETIME_EXP': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_READ_ERROR': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_WRITE_ERROR': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_CONNECT_FAIL': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_SECURE_CONNECT_FAIL': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_SOCKET_FAILURE': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_DNS_FAIL': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_URN_RESOLVE': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_ONLY_IF_CACHED_MISS': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_TOO_BIG': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_INVALID_RESP': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_UNSUP_HTTPVERSION': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_INVALID_REQ': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_UNSUP_REQ': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_INVALID_URL': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_ZERO_SIZE_OBJECT': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_PRECONDITION_FAILED': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_CONFLICT_HOST': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_FTP_DISABLED': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_FTP_UNAVAILABLE': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_FTP_FAILURE': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_FTP_PUT_ERROR': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_FTP_NOT_FOUND': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_FTP_FORBIDDEN': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_FTP_PUT_CREATED': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_FTP_PUT_MODIFIED': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_ESI': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_ICAP_FAILURE': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_GATEWAY_FAILURE': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_DIR_LISTING': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/ERR_SHUTTING_DOWN': (2) No such file or directory

2014/01/15 23:54:53 kid1| '/var/log/squid/errors/Portuguese/error-details.txt': (2) No such file or directory

2014/01/15 23:54:53 kid1| Logfile: opening log /var/log/squid/access.log

2014/01/15 23:54:53 kid1| WARNING: log name now starts with a module name. Use 'stdio:/var/log/squid/access.log'

2014/01/15 23:54:53 kid1| Unlinkd pipe opened on FD 14

2014/01/15 23:54:53 kid1| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec

2014/01/15 23:54:53 kid1| Store logging disabled

2014/01/15 23:54:53 kid1| Swap maxSize 262144 + 262144 KB, estimated 40329 objects

2014/01/15 23:54:53 kid1| Target number of buckets: 2016

2014/01/15 23:54:53 kid1| Using 8192 Store buckets

2014/01/15 23:54:53 kid1| Max Mem  size: 262144 KB

2014/01/15 23:54:53 kid1| Max Swap size: 262144 KB

2014/01/15 23:54:53 kid1| Rebuilding storage in /var/spool/squid3 (dirty log)

2014/01/15 23:54:53 kid1| Using Least Load store dir selection

2014/01/15 23:54:53 kid1| Current Directory is /

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:53 kid1| Finished loading MIME types and icons.

2014/01/15 23:54:53 kid1| HTCP Disabled.

2014/01/15 23:54:53 kid1| Squid plugin modules loaded: 0

2014/01/15 23:54:53 kid1| Adaptation support is off.

2014/01/15 23:54:53 kid1| Accepting NAT intercepted HTTP Socket connections at local=[::]:3128 remote=[::] FD 17 flags=41

2014/01/15 23:54:53 kid1| Done reading /var/spool/squid3 swaplog (0 entries)

2014/01/15 23:54:53 kid1| Store rebuilding is 0.00% complete

2014/01/15 23:54:53 kid1| Finished rebuilding storage from disk.

2014/01/15 23:54:53 kid1|         0 Entries scanned

2014/01/15 23:54:53 kid1|         0 Invalid entries.

2014/01/15 23:54:53 kid1|         0 With invalid flags.

2014/01/15 23:54:53 kid1|         0 Objects loaded.

2014/01/15 23:54:53 kid1|         0 Objects expired.

2014/01/15 23:54:53 kid1|         0 Objects cancelled.

2014/01/15 23:54:53 kid1|         0 Duplicate URLs purged.

2014/01/15 23:54:53 kid1|         0 Swapfile clashes avoided.

2014/01/15 23:54:53 kid1|   Took 0.14 seconds (  0.00 objects/sec).

2014/01/15 23:54:53 kid1| Beginning Validation Procedure

2014/01/15 23:54:53 kid1|   Completed Validation Procedure

2014/01/15 23:54:53 kid1|   Validated 0 Entries

2014/01/15 23:54:53 kid1|   store_swap_size = 0.00 KB

2014/01/15 23:54:53 kid1| ERROR: No forward-proxy ports configured.

2014/01/15 23:54:54 kid1| storeLateRelease: released 0 objects

Estou usando agora as portas padrões dos aplicativos, ou seja, o 3128 no iptables e squid, depois irei passar para o DG.

Se alguém puder me dar uma luz! rsrs, não to acostumado a configurar o iptables + squid + DG para uso na mesma máquina...

0 0

Quote

2. MELHOR RESPOSTA

JJSantos
(usa Gentoo)

Enviado em 16/01/2014 - 01:44h

Boa noite.
Tira o

intercept

E verifica o seguinte diretório:

/var/log/squid/errors/

Depois refaz o cache:

# squid -Z

0 0

Quote

3. Re: Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

removido
(usa Nenhuma)

Enviado em 16/01/2014 - 01:51h

Boa Noite Colega,

1) Altere na Primeira linha do squid para http_port 3128 transparent
2) Verifique o apontamento correto do diretorio de erros do squid, no debug já diz que o path do diretório esta incorreto.

Obs: Se for redhat o padrão e /usr/share/squid/errors/Portuguese

Att,
Tiago Eduardo Zacarias
LPIC-1

0 0

Quote

4. Re: Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

px
(usa Debian)

Enviado em 16/01/2014 - 02:00h

Galera já tirei mechi e revirei isto aqui, o problema tava no iptables e no tal do intercept que não funciona para a mesma máquina só para dnat...

script de iptables funfando agr...

#!/bin/bash



# Limpando tabelas

iptables -F

iptables -X

iptables -t nat -F

iptables -t nat -X



# Configurando as políticas padrões

iptables -P INPUT DROP

iptables -P OUTPUT ACCEPT

iptables -P FORWARD DROP

 

#-------------------------------------------------

# || INICIALIZANDO COMPARTILHAMENTO DE INTERNET ||

#-------------------------------------------------



#iptables -t nat -A POSTROUTING -o enp1s8 -j MASQUERADE



echo 1 > /proc/sys/net/ipv4/ip_forward

 

#--------------------------------------------

# || INICIANDO ROTEAMENTO PARA PROXY SQUID ||

#--------------------------------------------

 

#------ port 80

iptables -t nat -A PREROUTING -i enp1s8 -p tcp --dport 80 -j DNAT --to-destination 192.168.254.1:3128



#------ port 443



iptables -t nat -A PREROUTING -i enp1s8 -p tcp --dport 443 -j DNAT --to-destination 192.168.254.1:3128



#------ port 3128

iptables -A INPUT -p tcp --dport 3128 -j ACCEPT



#------ DNS

iptables -A INPUT -p tcp -s 192.168.254.254 -j ACCEPT

iptables -A INPUT -p udp -s 192.168.254.254 -j ACCEPT



#------ liberando tráfego sequencial...

iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT



#----------------------------------

# || ABRIR  A INTERFACE LOOPBACK ||

#----------------------------------

# Permitindo loopback

iptables -A INPUT -i lo -j ACCEPT

0 0

Quote

5. Re: Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

px
(usa Debian)

Enviado em 16/01/2014 - 02:02h

Ia dormir mas agora vou aproveitar este gaz para começar configurar o Dansguardian alguma dica??

0 0

Quote

6. Re: Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

removido
(usa Nenhuma)

Enviado em 16/01/2014 - 02:16h

Boa Noite Colega,

Sua Politica na cadeia FORWARD foi setada para DROP, se issu foi intencional, você bloqueará todo o trafego exceto o de navegação que será tratado pelo squid. Se houver necessidade de acesso a outras portas externas você terá de liberá-las que e o correto. Você DROP e depois liberá o que e necessário.

Quanto ao dansguardian, existem varios tutoriais aqui no VOL fique a vontade.

Att,

Tiago Eduardo Zacarias
LPIC-1

0 0

Quote

7. Re: Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

px
(usa Debian)

Enviado em 16/01/2014 - 02:27h

thiago304 escreveu:

Boa Noite Colega,

Sua Politica na cadeia FORWARD foi setada para DROP, se issu foi intencional, você bloqueará todo o trafego exceto o de navegação que será tratado pelo squid. Se houver necessidade de acesso a outras portas externas você terá de liberá-las que e o correto. Você DROP e depois liberá o que e necessário.

Quanto ao dansguardian, existem varios tutoriais aqui no VOL fique a vontade.

Att,

Tiago Eduardo Zacarias
LPIC-1

Para o FORWARD foi sim intecional, já que minha verdadeira intenção é usar iptables + squid + DG em uma unica máquina...

vlw pela força e já achei ótimos tutoriais aqui, destaque para o do colega abaixo:

@maran

http://www.vivaolinux.com.br/artigo/DansGuardian-Filtrando-o-acesso-a-Web?pagina=1

0 0

Quote

8. Re: Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

px
(usa Debian)

Enviado em 16/01/2014 - 02:30h

Só para fechar o tópico irei postar aqui o script de iptables e squid em uma só maquina:

IPTABLES:

#!/bin/bash



# Limpando tabelas

iptables -F

iptables -X

iptables -t nat -F

iptables -t nat -X



# Configurando as políticas padrões

iptables -P INPUT DROP

iptables -P OUTPUT ACCEPT

iptables -P FORWARD DROP

 

#-------------------------------------------------

# || INICIALIZANDO COMPARTILHAMENTO DE INTERNET ||

#-------------------------------------------------



#iptables -t nat -A POSTROUTING -o enp1s8 -j MASQUERADE



echo 1 > /proc/sys/net/ipv4/ip_forward

 

#--------------------------------------------

# || INICIANDO ROTEAMENTO PARA PROXY SQUID ||

#--------------------------------------------

 

#------ port 80

iptables -t nat -A PREROUTING -i enp1s8 -p tcp --dport 80 -j DNAT --to-destination 192.168.254.1:3128



#------ port 443



iptables -t nat -A PREROUTING -i enp1s8 -p tcp --dport 443 -j DNAT --to-destination 192.168.254.1:3128



#------ port 3128

iptables -A INPUT -p tcp --dport 3128 -j ACCEPT



#------ DNS

iptables -A INPUT -p tcp -s 192.168.254.254 -j ACCEPT

iptables -A INPUT -p udp -s 192.168.254.254 -j ACCEPT



#------ liberando tráfego sequencial...

iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT



#----------------------------------

# || ABRIR  A INTERFACE LOOPBACK ||

#----------------------------------

# Permitindo loopback

iptables -A INPUT -i lo -j ACCEPT

SQUID.CONF

## Squid.conf - Configurado por PX



http_port 3128



#Memória do cache

cache_mem 256 MB



#Usar o máximo de memória possível

memory_pools on

memory_pools_limit 256 MB



#Tamanho máximo de arquivos alocados na RAM

maximum_object_size_in_memory 256 KB



#Diretório do cache - Tamanho em MB do cache em disco (esta como 4GB altere se necessário) - número de pastas - número de subpastas

cache_dir ufs /var/spool/squid3 256 16 256



#Porcentagem de atualização do cache -limpo ao atingir o máximo

cache_swap_low 85

cache_swap_high 95



#Maximo e Minimo armazenados no disco

maximum_object_size 10 MB

minimum_object_size 1024 KB



#Diretório de erros

error_directory /var/log/squid/errors/Portuguese



#Log

cache_access_log /var/log/squid/access.log



refresh_pattern ^ftp: 15 20% 2280

refresh_pattern ^gopher: 15 0% 2280

refresh_pattern . 15 20% 2280



# Portas Liberadas

acl SSL_ports port 443

acl Safe_ports port 443 # https

acl Safe_ports port 80  # http

acl Safe_ports port 1025-65535 # unregistered ports

acl CONNECT method CONNECT



http_access deny !Safe_ports



## REGRAS ##



#ACL PARA CONEXAO METODO SSL

acl CONNECT method CONNECT

http_access deny CONNECT !SSL_ports

  

#ACL PARA LIBERACAO TOTAL POR MAC

#acl mac_liberados arp "/etc/squid/mac_liberados"

 

#ACL PARA SITES LIBERADOS

#acl sites_liberados url_regex -i "/etc/squid/sites_liberados"



#ACL PARA SITES BLOQUEADOS

#acl sites_bloqueados url_regex -i "/etc/squid/sites_bloqueados"



#ACL REDE LOCAL

acl rede_local src 192.168.254.0/24



# Liberando Acessos

http_access allow localhost

http_access allow rede_local

#http_access allow mac_liberados

#http_access allow sites_liberados



# Negando Acessos

#http_access deny sites_bloqueados

http_access deny all

0 0

Quote

9. Re: Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

Buckminster
(usa Debian)

Enviado em 16/01/2014 - 02:44h

Eu sei que o tópico já foi encerrado.

Usar o intercept é para colocar o Squid como proxy transparente e isso implica em ter uma rede por trás dele.

Para Squid somente para a própria máquina onde ele está instalado não se coloca nada após http_port 3128.

Mas você tem uma rede local

acl rede_local src 192.168.254.0/24

deixando assim, http_port 3128, você terá que setar o proxy nos navegadores.

0 0

Quote

10. Re: Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

px
(usa Debian)

Enviado em 16/01/2014 - 17:14h

Buckminster escreveu:

Eu sei que o tópico já foi encerrado.

Usar o intercept é para colocar o Squid como proxy transparente e isso implica em ter uma rede por trás dele.

Para Squid somente para a própria máquina onde ele está instalado não se coloca nada após http_port 3128.

Mas você tem uma rede local

acl rede_local src 192.168.254.0/24

deixando assim, http_port 3128, você terá que setar o proxy nos navegadores.

É, tive um trabalhinho para obrigar o Chromium a usar o proxy, ai lembrei da opção pela linha de comando e alterei o atalho adicionando o "comando" --proxy-server=host:port, bastou apontar para o DG e ta quase tudo pegando, no firefox a opção de proxy estava normal, bastou configurar nas opções... só ta difícil de colocar umas exceções... para abrir o vol eu tive que usar o arquivo "exceptionphraselist" pois o arquivo de liberar um domínio não quis pegar (o burro aqui não conseguiu rsrs).

Já o http_port deixei assim:

http_port 192.168.254.1:3128

e no Dansguardian coloquei:

127.0.0.1 em uma porta alta ai...

Alterei umas opções para integrar o DG no squid e ta funfando, ainda falta deixar ele de acordo com minhas intenções de bloqueio (alguns ads, malware, [*****]ô).

O mais interessante que pude observar que o iptables + squid + DG não puxam nada de memória/processamento da sua máquina, e você pode usa-los para controle de navegação/proxy aumentando a segurança da rede e em muitos casos melhorando sua navegação/banda mesmo com um squid simples em uma máquina...

E mesmo o tópico estando fechado, você (ou algém) querendo fazer alguma observação em algumas prováveis cagadas que devo ter feito nesta madrugada sonolenta, fique a vontade :D

0 0

Quote

11. Re: Squid 3.4.2 não sobe nem com reza braba! [RESOLVIDO]

JJSantos
(usa Gentoo)

Enviado em 16/01/2014 - 17:57h

px escreveu:

É, tive um trabalhinho para obrigar o Chromium a usar o proxy, ai lembrei da opção pela linha de comando e alterei o atalho adicionando o "comando" --proxy-server=host:port, bastou apontar para o DG e ta quase tudo pegando, no firefox a opção de proxy estava normal, bastou configurar nas opções... só ta difícil de colocar umas exceções... para abrir o vol eu tive que usar o arquivo "exceptionphraselist" pois o arquivo de liberar um domínio não quis pegar (o burro aqui não conseguiu rsrs).

Proxy no chrome:

# nano /etc/chromium-browser/default

http_proxy="IP DO PROXY"

export http_proxy

Liberando por dominios:

############## Access Lists - ACL'S################



acl nobloqsites dstdomain -i "/etc/squid3/noblockedomains"



############### Releasing Access ################

# I released some hits in hours working range.



http_access allow noblockedomains

E mesmo o tópico estando fechado, você (ou algém) querendo fazer alguma observação em algumas prováveis cagadas que devo ter feito nesta madrugada sonolenta, fique a vontade :D

Até

0 0

Quote