مشکل با کش اسکویید... کمک...

[vaheed]

 
ُSquid.conf

کد: [انتخاب]

acl all src all
acl mynet src 192.168.10.0/24 192.168.11.0/24
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl SSL_ports port 443          # https
acl SSL_ports port 563          # snews
acl SSL_ports port 873          # rsync
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl Safe_ports port 631         # cups
acl Safe_ports port 873         # rsync
acl Safe_ports port 901         # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access allow localhost
http_access allow all
http_access allow mynet
http_reply_access allow all
icp_access allow localnet
icp_access allow all
htcp_access allow localnet
htcp_access allow all
htcp_clr_access allow all
miss_access allow all
ident_lookup_access allow all
http_port 3128 transparent
cache_peer 192.168.10.1 parent 8080 3130 no-query no-digest
hierarchy_stoplist cgi-bin ?
cache_mem 64 MB
maximum_object_size_in_memory 8 KB
cache_dir ufs /var/spool/squid 100 16 256
minimum_object_size 0 KB
maximum_object_size 4096 KB
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
dns_nameservers 4.2.2.1 10.10.10.1 4.2.2.4
hosts_file /etc/hosts
coredump_dir /var/spool/squid

Acces.log

کد: [انتخاب]

1236848058.644   3160 192.168.10.1 TCP_MISS/403 1453 GET http://www.cnn.com/ - DIRECT/64.236.90.21 text/html
1236848070.642   2898 192.168.10.1 TCP_MISS/403 1457 GET http://www.yahoo.com/ - DIRECT/87.248.113.14 text/html
1236848198.643   2835 192.168.10.1 TCP_MISS/403 1535 GET http://en-us.fxfeeds.mozilla.com/en-US/firefox/headlines.xml - DIRECT/63.245.209.93 text/html
1236848323.657  30927 192.168.10.1 TCP_MISS/403 1457 GET http://www.yahoo.com/ - DIRECT/87.248.113.14 text/html
1236848340.652  35042 192.168.10.1 TCP_MISS/403 1531 GET http://news.bbc.co.uk/go/rss/-/2/hi/south_asia/7936580.stm - DIRECT/212.58.226.77 text/html
1236848371.673  30962 192.168.10.1 TCP_MISS/403 1481 GET http://news.bbc.co.uk/favicon.ico - DIRECT/212.58.226.77 text/html
1236848405.649  33944 192.168.10.1 TCP_MISS/403 1481 GET http://news.bbc.co.uk/favicon.ico - DIRECT/212.58.226.77 text/html
1236848556.194    233 192.168.10.1 TCP_MISS/403 1531 GET http://news.bbc.co.uk/go/rss/-/2/hi/south_asia/7936580.stm - DIRECT/212.58.226.79 text/html
1236848562.869    520 192.168.10.1 TCP_MISS/403 1455 GET http://www.djgf.com/ - DIRECT/82.98.86.176 text/html
1236848563.025     73 192.168.10.1 TCP_MISS/403 1477 GET http://www.djgf.com/favicon.ico - DIRECT/82.98.86.176 text/html
1236848565.975     33 192.168.10.1 TCP_MISS/403 1477 GET http://www.djgf.com/favicon.ico - DIRECT/82.98.86.176 text/html
1236850905.494   1085 192.168.10.1 TCP_MISS/403 1457 GET http://speed-n3t.com/ - DIRECT/91.186.0.11 text/html


Internet---> Mikrotik-----> Squid----> Client

Mikrotik:192.168.10.1
Squid:192.168.10.2
Client:192.168.11.0/24 and 192.168.10.0/24

به صورت دستی هم رو بروزر آی پی و پورت اسکوییدو میدم اینو میده...

کد: [انتخاب]

ERROR
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://speed-n3t.com/

The following error was encountered:

Access Denied.
Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is root.



--------------------------------------------------------------------------------

Generated Thu, 12 Mar 2009 11:11:57 GMT by 1.1 (squid/2.6.STABLE4)

نمیدونم دیگه باید چی کار کنم هر سایتی میزنم acces_deny TCP_MISS/403 میده...

یکی کمک کنه دارم دیوونه میشم...

[netsaba]

به نام خدا
سلام
اول كه لطفا واضحتر سئوال بپرسيد.
دوم: چطوري داري درخواستها رو به اسكوييد مي فرستي؟ بامارك كردن با ريدايركت كردن با چي؟
سوم: كش ميكروتيك رو راه انداختي؟
 چهارم: ping 4.2.2.4 رو چي داري روي كلاينت؟
پنجم: اگه روي كلاينت بري و توي اينترنت اكسپلورر proxy  تعريف كني با همون ip  اسكوييد و پورت 3128 آيا اون سيستم  صفحه باز مي كنه؟

[vaheed]

الان مشکلم اینجاست که کشم درست کار نمیکنه, هنوز به اونجا نرسیدم که بخوام پکتمام را با میکروتیک روت کنم, ....

من الان کش اسکویید را ران کردم بعد روي كلاينت و توي اينترنت اكسپلورر proxy  تعريف كردم با همون ip  اسكوييد و پورت  3128  بهم خطای زیرو میده...

کد: [انتخاب]

ERROR
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://speed-n3t.com/

The following error was encountered:

Access Denied.
Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is root.



--------------------------------------------------------------------------------
پینگ 4.2.2.1 و هر جای دیگه ای هم روی کلاینت دارم چون فعلا اسکویید را وارد تنضیمات میکروتیک نکردم...

اینم بگم وقتی یه آیپی تو شبکه خودم را بروز میکنم ( مثل ای پی وب اینتر فیس میکروتیک ) برام باز میکنه اما وقتی آیپی سایت یاهو یا ... میدم خطای بالا را میده.

اگه بازم توضیحات کامل تر میخوای بگو که بگم فقط تو رو خدا یکی کمکم کنه دارم دیوونه میشم.

[netsaba]

به نام خدا
سلام
اگه شما پينگ رو داري احتمالا مي تونه مشكل از dns  هات باشه اين طور كه من توي فايلت ديدم  درسته

کد: [انتخاب]

dns_nameservers 4.2.2.1 10.10.10.1 4.2.2.4 حالا شما بيا همون 4.2.2.4 رو به local area بده و dns  ديگه اي نده بعد روي سرور ت هم چك كن توي فايل  etc/resolv.conf چه dns  اي رو دادي بازم بهتره 4.2.2.4 رو بدي.

اين كار رو هم بكن

کد: [انتخاب]

acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
http_access allow manager localhost

و اين acl  ها رو #

کد: [انتخاب]

cl mynet src 192.168.10.0/24 192.168.11.0/24
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8     # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network كن ببين چي ميشه.

راستي مدل ميكروتيك رو هم بگو

[vaheed]

آقا تمام این تغییرات را به شکلهای مختلف اعمال کردم ولی بازم جوابی نگرفتم 

[netsaba]

به نام خدا
سلام

ببين اين كانفيگه رو بزن ببينم چي مشيه .من تغييرات مربوط به تو رو دادم ديگه نمي خواهي تغييري بدي.
و حتما بعد از جابجايي حتما اين دستور رو بزن و اسكوييد رو ريست كن
بعد از ريست خروجي رو هم بزار

sudo /etc/init.d/squid restart

 ورژن اسكوييدي هم كه نصب كردي بگو
مدل ميكروتيك رو هم بگو

کد: [انتخاب]

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
ipcache_size 16384   #4096
fqdncache_size 16384 #4096

cache_dir aufs /var/spool/squid 35000 16 256
visible_hostname hostname
cache_mgr webmaster

acl nimda1 urlpath_regex -i \.elm$
acl nimda2 urlpath_regex -i root.exe
acl nimda3 urlpath_regex -i cmd.exe
acl nimda4 urlpath_regex -i ^http://.*www
acl nimda5 urlpath_regex -i readme.exe
acl nimda6 urlpath_regex -i default.id
acl nimda7 urlpath_regex -i :25

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT


http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny nimda1
http_access deny nimda2
http_access deny nimda3
http_access deny nimda4
http_access deny nimda5
http_access deny nimda6
http_access deny nimda7
http_access allow all
icp_access allow all
httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
http_port 3128 transparent
ie_refresh on

#snmp
acl snmppublic snmp_community public
snmp_access allow snmppublic all
snmp_incoming_address 0.0.0.0
snmp_outgoing_address 0.0.0.0


cache_mem 128 MB                               #  8 MB
maximum_object_size 1000 MB                    #  4096 KB
maximum_object_size_in_memory 256 KB           #  8 KB
dns_nameservers  4.2.2.4
request_header_max_size 10000 KB                 #  10 KB
request_timeout 120 second                     #  30 seconds




refresh_pattern -i ^ftp: 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.jpg$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.html$ 57600 50 60000 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.class$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.zip$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.jpeg$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mid$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.shtml$ 57600 50 60000 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.exe$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.thm$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.wav$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.txt$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.cab$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.au$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mov$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.xbm$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ram$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.avi$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.chtml$ 57600 50 60000 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.thb$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.dcr$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.bmp$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.phtml$ 57600 50 60000 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mpg$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.pdf$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.art$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.swf$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.mp3$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.ra$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.spl$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.viv$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.doc$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.gz$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.Z$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tgz$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.tar$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.vrm$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.vrml$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.aif$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.aifc$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.aiff$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.arj$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.c$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.cpt$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.dir$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.dxr$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.hqx$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.jpe$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.lha$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.lzh$ 57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.midi$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.movie$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.mp2$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.mpe$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.mpeg$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.mpga$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.pl$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.ppt$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.ps$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.qt$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.qtm$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.ras$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.sea$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.sit$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.tif$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.tiff$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.asp$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.aspx$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.php$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.js$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.jsp$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.perl$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.cgi$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.fla$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.xml$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.xhtml$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.sxml$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.ocx$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.java$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.css$ 57600 90 86400 override-expire override-lastmod reload-into-ims
 refresh_pattern -i \.     57600 90 86400 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.htmx 57600 90 86400 override-expire override-lastmod reload-into-ims
cache_access_log /var/log/squid/access.log
cache_store_log /var/log/squid/store.log
cache_log /var/log/squid/cache.log

[vaheed]

آقا این کانفیگی که گفتی برای چه ورژنی از اسکوییده؟

اسکویید من ورژن 3 هستش...
میکروتیکمم ورژن 3.11 هستش...

[netsaba]

به نام خدا
سلام

اين كه من دارم برا 2 بدردت نمي خوره
البته اگه اسكوييد 2 رو نصب كني كه ميشه باهاش كار كرد.