redirecionamendo de portas não funciona Squid3/Haarp

fsoaresr
(usa Ubuntu)

Enviado em 26/12/2014 - 13:47h

Limpei o cache so haarp para ter certeza do cache, ocorre que ele não esta fazendo cache das paginas e arquivos baixados, conforme fazia antes e não somente está deixando de entregar, fica tudo miss 200 ou miss 403 com o exemplo do pre visualizador de músicas do 4hared a resposta na página é arquivo não encontrado

Obrigado novamente,

fsoaresr
(usa Ubuntu)

Enviado em 26/12/2014 - 16:45h

Sim coloquei nas duas linhas

Obrigado fernando

Segue o conf Atual:

# url_rewrite_program /usr/bin/squidGuard
http_port 3128 intercept
http_port 192.168.1.179:8080 intercept
visible_hostname DOTNET

acl redelocal src 192.168.1.0/24 # rede interna
#acl localnet src 10.0.0.0/8 # RFC1918 possible internal network

acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 1863 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

# Configuracao do cache
cache_mem 750 MB
cache_swap_low 90
cache_swap_high 95

#cache_dir aufs /var/squid3/cache 50000 16 256
cache_dir ufs /var/squid3/cache/1 10000 16 256
cache_dir ufs /var/squid3/cache/2 10000 16 256
cache_dir ufs /var/squid3/cache/3 10000 16 256
cache_dir ufs /var/squid3/cache/4 10000 16 256
cache_dir ufs /var/squid3/cache/5 10000 16 256

minimum_object_size 1 kB
maximum_object_size 300 MB
maximum_object_size_in_memory 500 KB

access_log /var/log/squid3/access.log squid
cache_log /var/log/squid3/cache.log
#cache_store_log /var/log/squid3/store.log # Trava tudo
pid_filename /run/squid3.pid
mime_table /usr/share/squid3/mime.conf

cache_mgr dotnetlan@hotmail.com
memory_pools off

diskd_program /usr/lib/squid3/diskd
unlinkd_program /usr/lib/squid3/unlinkd

# acl cache-videos dstdomain -i "/etc/squid3/cache-videos/cache-videos.txt"
# cache allow cache-videos

#refresh_pattern ^ftp: 1440 20% 10080
#refresh_pattern ^gopher: 1440 0% 1440
#refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
#refresh_pattern (Release|Packages(.gz)*)$ 0 20% 2880
#refresh_pattern . 0 20% 4320

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0 4320
refresh_pattern . 45 40% 4320

refresh_pattern -i \.(jpg|jpeg|gif|png|tiff|tif|svg|ico|css|js|vsd|doc|ppt|pps|xls|pdf|zip|gz|bz2|tgz|tar|rar|odc|odb|odf|odg|odi|odp|ods|odt|sxc|sxd|sxi|sxw|dmg|torrent|deb|msi|iso|rpm|mpg|mpeg|mov|avi|wmv|divx|swf|flv|rm|mp3|mp4|m4a|ogg|wav|wma|ra|mid)[/]*[\?]*$ 10080 90% 999999 ignore-no-cache override-expire ignore-private

refresh_pattern /(image|image_large|image_preview|image_mini|image_thumb|image_tile|image_icon|image_listing)[/]*[\?]*$ 1080 90% 999999

quick_abort_max -1 KB
quick_abort_pct 95
quick_abort_min -1 KB
range_offset_limit -1

detect_broken_pconn on
pipeline_prefetch on
fqdncache_size 1024
#request_header_max_size 20 KB
#reply_header_max_size 20 KB
#request_body_max_size 0 KB

##Listas de sites permitidos e proibidos
acl sites_proibidos url_regex -i "/etc/squid3/sites_proibidos.txt"
http_access deny sites_proibidos

# acl googlevideo dstdomain .googlevideo.com
# cache allow googlevideo
# acl youtube dstdomain .youtube.com
# cache allow youtube
# acl ytimg dstdomain .ytimg.com
# cache allow ytimg

acl get_requests urlpath_regex \?
acl fake_get_requests urlpath_regex \?$
cache allow get_requests !fake_get_requests

# acl post_requests method POST
# cache deny post_requests

acl cgibin urlpath_regex /cgi-bin/
cache allow cgibin

# acl ac_cookie req_header Cookie -i __ac
# acl zope_cookie req_header Cookie -i _ZopeId=
# cache deny ac_cookie
# cache deny zope_cookie

acl static_content urlpath_regex -i \.(jpg|jpeg|gif|png|tiff|tif|svg|ico|css|js|vsd|doc|ppt|pps|xls|pdf|zip|gz|bz2|tgz|tar|rar|odc|odb|odf|odg|odi|odp|ods|odt|sxc|sxd|sxi|sxw|dmg|torrent|deb|msi|iso|rpm|mpg|mpeg|mov|avi|wmv|divx|swf|flv|rm|mp3|mp4|m4a|ogg|wav|wma|ra|mid)[/]*[\?]*$
cache allow static_content

acl atimage_sizes urlpath_regex /(image|image_large|image_preview|image_mini|image_thumb|image_tile|image_icon|image_listing)[/]*[\?]*$
cache allow atimage_sizes
cache allow all

#acl manager proto cache_object
http_access allow manager localhost
#http_access deny manager

acl red_local src 192.168.1.0/24
http_access allow red_local

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow redelocal
http_access allow all

coredump_dir /var/spool/squid3

cache_mgr dotnelan@hotmail.com
mail_program mail
cache_effective_user proxy
cache_effective_group proxy
httpd_suppress_version_string off

error_directory /usr/share/squid3/errors/Portuguese

acl haarp_lst url_regex -i "/etc/haarp/haarp.lst"
cache deny haarp_lst
# cache_peer 192.168.1.179 parent 8080 0 proxy-only no-digest
cache_peer 192.168.1.179 parent 8080 0 carp
dead_peer_timeout 2 seconds
cache_peer_access 192.168.1.179 allow haarp_lst
cache_peer_access 192.168.1.179 deny all


# acl thunder_lst url_regex -i "/etc/thunder/thunder.lst"
# cache deny thunder_lst
# cache_peer 192.168.1.179 parent 8080 0 proxy-only no-digest
# dead_peer_timeout 2 seconds
# cache_peer_access 192.168.1.179 allow thunder_lst
# cache_peer_access 192.168.1.179 deny all

buckminster
(usa Debian)

Enviado em 26/12/2014 - 21:45h

Teste colocando intercept somente na primeira linha

http_port 3128 intercept
http_port 192.168.1.179:8080

fsoaresr
(usa Ubuntu)

Enviado em 27/12/2014 - 18:51h

ok, está em testes , posto os resultados jaja,

Obrigado novamente,

Fernando

fsoaresr
(usa Ubuntu)

Enviado em 28/12/2014 - 17:03h

Ola , boa tarde,

Fiz a alteração colocando intercept só na 1 linha, o haarp só entrega o arquivo que está no cache mas não faz cache de nada,
o que devo fazer?

Obrigado novamente,


Fernando