ERRO NO SQUID.CONF

isra
(usa Debian)

Enviado em 11/01/2016 - 17:31h

Blz galera do Viva o linux!

To começando aqui no site, ME AJUDEM AQUI POR FAVOR!

seguinte, comecei a fazer meu squid.conf e ja coloquei pro squid rodar so que ele ta dando esses erros.

Alguns são por faltar o documento, ja o da linha 29 não vejo pq ta apresentando.

Alguem me ajuda ai.

Desde ja agradeço!

[root@pc-57 squid]# service squid start
Iniciando o squid: [FALHOU]
2016/01/11 17:07:59| Processing Configuration File: /etc/squid/squid.conf (depth 0)
2016/01/11 17:07:59| Processing: acl manager proto cache_object
2016/01/11 17:07:59| Processing: acl loaclhost src 127.0.0.1/24 ::1
2016/01/11 17:07:59| aclIpParseIpData: WARNING: Netmask masks away part of the specified IP in '127.0.0.1/24'
2016/01/11 17:07:59| Processing: alc to_localhost dst 127.0.0.0/8 0.0.0.0/24 ::1
2016/01/11 17:07:59| cache_cf.cc(381) parseOneConfigFile: squid.conf:4 unrecognized: 'alc'
2016/01/11 17:07:59| Processing: visible_hostname meuproxy
2016/01/11 17:07:59| Processing: http_port 3128 intercept
2016/01/11 17:07:59| Starting Authentication on port [::]:3128
2016/01/11 17:07:59| Disabling Authentication on port [::]:3128 (interception enabled)
2016/01/11 17:07:59| Disabling IPv6 on port [::]:3128 (interception enabled)
2016/01/11 17:07:59| Processing: acl localnet src 192.168.2.41/24
2016/01/11 17:07:59| aclIpParseIpData: WARNING: Netmask masks away part of the specified IP in '192.168.2.41/24'
2016/01/11 17:07:59| Processing: acl Safe_ports port 80 21 70 210 280 488 591 777 # portas padroes
2016/01/11 17:07:59| Processing: acl Safe_ports port 443 # https
2016/01/11 17:07:59| Processing: acl SSL_ports port 443 563 #ssl
2016/01/11 17:07:59| Processing: acl Safe_ports port 1025-65535 #portas altas
2016/01/11 17:07:59| Processing: acl CONNECT method CONNECT
2016/01/11 17:07:59| Processing: auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/passwd
2016/01/11 17:07:59| Processing: acl autentica proxy_auth REQUIRED
2016/01/11 17:07:59| Processing: acl blocksites dstdomain "/etc/squid/bloqueados"
2016/01/11 17:07:59| strtokFile: /etc/squid/bloqueados not found
2016/01/11 17:07:59| Warning: empty ACL: acl blocksites dstdomain "/etc/squid/bloqueados"
2016/01/11 17:07:59| Processing: acl blockkeywords url_regex -i"/etc/squid/palavras"
2016/01/11 17:07:59| Processing: http_access allow manager localhost
2016/01/11 17:07:59| aclParseAclList: ACL name 'localhost' not found.
FATAL: Bungled squid.conf line 29: http_access allow manager localhost
Squid Cache (Version 3.1.23): Terminated abnormally.
CPU Usage: 0.015 seconds = 0.006 user + 0.009 sys
Maximum Resident Size: 24128 KB
Page faults with physical i/o: 0

isra
(usa Debian)

Enviado em 11/01/2016 - 17:42h

Meu squid.conf ta assim:

padrão
acl manager proto cache_object
acl loaclhost src 127.0.0.1/24 ::1
alc to_localhost dst 127.0.0.0/8 0.0.0.0/24 ::1
visible_hostname meuproxy
http_port 3128 intercept

#capturar a rede

acl localnet src 192.168.2.41/24

#portas

acl Safe_ports port 80 21 70 210 280 488 591 777 # portas padroes
acl Safe_ports port 443 # https
acl SSL_ports port 443 563 #ssl
acl Safe_ports port 1025-65535 #portas altas

acl CONNECT method CONNECT

auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/passwd
acl autentica proxy_auth REQUIRED

acl blocksites dstdomain "/etc/squid/bloqueados"
acl blockkeywords url_regex -i"/etc/squid/palavras"

#permissoes

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny blocksites
http_access deny blockkeywords
http_access deny to_localhost

http_access allow autentica
http_access deny !autentica

padrão
acl manager proto cache_object
acl loaclhost src 127.0.0.1/24 ::1
alc to_localhost dst 127.0.0.0/8 0.0.0.0/24 ::1
visible_hostname meuproxy
http_port 3128 intercept

#capturar a rede

acl localnet src 192.168.2.41/24

#portas

acl Safe_ports port 80 21 70 210 280 488 591 777 # portas padroes
acl Safe_ports port 443 # https
acl SSL_ports port 443 563 #ssl
acl Safe_ports port 1025-65535 #portas altas

acl CONNECT method CONNECT

auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/passwd
acl autentica proxy_auth REQUIRED

acl blocksites dstdomain "/etc/squid/bloqueados"
acl blockkeywords url_regex -i"/etc/squid/palavras"

#permissoes

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny blocksites
http_access deny blockkeywords
http_access deny to_localhost

http_access allow autentica
http_access deny !autentica

http_access deny all

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440

Buckminster
(usa Debian)

Enviado em 11/01/2016 - 18:31h

Deixe assim teu squid.conf:

# padrão
# acl manager proto cache_object
# acl localhost src 127.0.0.1/24 ::1
# acl to_localhost dst 127.0.0.0/8 0.0.0.0/24 ::1
visible_hostname meuproxy
http_port 3128 intercept

#capturar a rede

acl localnet src 192.168.2.41/24

#portas

acl Safe_ports port 80 21 70 210 280 488 591 777 # portas padroes
acl Safe_ports port 443 # https
acl SSL_ports port 443 563 #ssl
acl Safe_ports port 1025-65535 #portas altas

acl CONNECT method CONNECT

auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/passwd
acl autentica proxy_auth REQUIRED

acl blocksites dstdomain "/etc/squid/bloqueados"
acl blockkeywords url_regex -i "/etc/squid/palavras"

#permissoes

http_access allow localhost manager
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny blocksites
http_access deny blockkeywords
http_access deny to_localhost

http_access allow autentica
http_access deny !autentica

http_access deny all

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440

Reinicie o Squid3 e teste.

isra
(usa Debian)

Enviado em 12/01/2016 - 08:43h

Eita brother, ainda não funcionou,

continuou o erro:

root@pc-57 squid]# service squid start
Iniciando o squid: [FALHOU]
2016/01/12 08:39:40| Processing Configuration File: /etc/squid/squid.conf (depth 0)
2016/01/12 08:39:40| Processing: visible_hostname meuproxy
2016/01/12 08:39:40| Processing: http_port 3128 intercept
2016/01/12 08:39:40| Starting Authentication on port [::]:3128
2016/01/12 08:39:40| Disabling Authentication on port [::]:3128 (interception enabled)
2016/01/12 08:39:40| Disabling IPv6 on port [::]:3128 (interception enabled)
2016/01/12 08:39:40| Processing: acl localnet src 192.168.2.41/24
2016/01/12 08:39:40| aclIpParseIpData: WARNING: Netmask masks away part of the specified IP in '192.168.2.41/24'
2016/01/12 08:39:40| Processing: acl Safe_ports port 80 21 70 210 280 488 591 777 # portas padroes
2016/01/12 08:39:40| Processing: acl Safe_ports port 443 # https
2016/01/12 08:39:40| Processing: acl SSL_ports port 443 563 #ssl
2016/01/12 08:39:40| Processing: acl Safe_ports port 1025-65535 #portas altas
2016/01/12 08:39:40| Processing: acl CONNECT method CONNECT
2016/01/12 08:39:40| Processing: auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/passwd
2016/01/12 08:39:40| Processing: acl autentica proxy_auth REQUIRED
2016/01/12 08:39:40| Processing: acl blocksites dstdomain "/etc/squid/bloqueados"
2016/01/12 08:39:40| strtokFile: /etc/squid/bloqueados not found
2016/01/12 08:39:40| Warning: empty ACL: acl blocksites dstdomain "/etc/squid/bloqueados"
2016/01/12 08:39:40| Processing: acl blockkeywords url_regex -i "/etc/squid/palavras"
2016/01/12 08:39:40| strtokFile: /etc/squid/palavras not found
2016/01/12 08:39:40| Warning: empty ACL: acl blockkeywords url_regex -i "/etc/squid/palavras"
2016/01/12 08:39:40| Processing: http_access allow localhost manager
2016/01/12 08:39:40| aclParseAclList: ACL name 'localhost' not found.
FATAL: Bungled squid.conf line 29: http_access allow localhost manager
Squid Cache (Version 3.1.23): Terminated abnormally.
CPU Usage: 0.008 seconds = 0.007 user + 0.001 sys
Maximum Resident Size: 23856 KB
Page faults with physical i/o: 0

Agradeço pela ajuda, faz ideia do que possa ser?

andr3ribeiro
(usa Arch Linux)

Enviado em 12/01/2016 - 09:15h

Vamos por partes.
Entender o problema e resolve-lo é o metodo mais valioso!/

Vamos lá

2016/01/12 08:39:40| aclIpParseIpData: WARNING: Netmask masks away part of the specified IP in '192.168.2.41/24' 

Informando uma mascara de 24bits (255.255.255.0) especifica-se um range de rede de 192.168.2.1 até 192.168.2.254 pra usar, então, o squid informa que o Endereço de rede informado faz parte da mascara especificada (192.168.2.41)
Aqui vai o endereço CIDR 192.168.2.0/24 que é o endereço da rede + a mascara

2016/01/12 08:39:40| strtokFile: /etc/squid/bloqueados not found 

o arquivo /etc/squid/bloqueados não existe

2016/01/12 08:39:40| Warning: empty ACL: acl blocksites dstdomain "/etc/squid/bloqueados" 

Aviso de que a ACL esta vazia (porque o arquivo nao existe, ou o caminho esta incorreto)

2016/01/12 08:39:40| strtokFile: /etc/squid/palavras not found 

O arquivo /etc/squid/palavras não existe

2016/01/12 08:39:40| Warning: empty ACL: acl blockkeywords url_regex -i "/etc/squid/palavras" 

Aviso de que a ACL esta vazia (porque o arquivo nao existe, ou o caminho esta incorreto)

2016/01/12 08:39:40| aclParseAclList: ACL name 'localhost' not found. 

Foi comentado a linha de declaração da ACL localhost, então deve se retirar a ação dela comentando a linha:
http_access allow localhost manager

FATAL: Bungled squid.conf line 29: http_access allow localhost manager 

Falha Fatal por causa do item anterior


Crie os arquivos:

/etc/squid/bloqueados

/etc/squid/palavras

 

Caso nao queira que aparece os warnings adas ACLs em branco, popule com alguma informação esses arquivos

Deixe o squid.conf assim:

visible_hostname meuproxy

http_port 3128 intercept



#capturar a rede

acl localnet src 192.168.2.0/24



#portas

acl Safe_ports port 80 21 70 210 280 488 591 777 # portas padroes

acl Safe_ports port 443 # https

acl SSL_ports port 443 563 #ssl

acl Safe_ports port 1025-65535 #portas altas



acl CONNECT method CONNECT

auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/passwd

acl autentica proxy_auth REQUIRED

acl blocksites dstdomain "/etc/squid/bloqueados"

acl blockkeywords url_regex -i "/etc/squid/palavras"



#permissoes

http_access deny !Safe_ports

http_access deny CONNECT !SSL_ports

http_access deny blocksites

http_access deny blockkeywords

http_access allow autentica

http_access deny !autentica

http_access deny all



refresh_pattern ^ftp: 1440 20% 10080

refresh_pattern ^gopher: 1440 0% 1440

 

Reinicie o squid e teste

Buckminster
(usa Debian)

Enviado em 12/01/2016 - 09:21h

Aqui

acl localnet src 192.168.2.41/24

mude para

acl localnet src 192.168.2.40/24


Aqui
strtokFile: /etc/squid/bloqueados not found

crie o arquivo /etc/squid/bloqueados.

Aqui
strtokFile: /etc/squid/palavras not found

crie o arquivo /etc/squid/palavras.



Agora deixe assim teu squid.conf:

# padrão
acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
visible_hostname meuproxy
http_port 3128 intercept

#capturar a rede

acl localnet src 192.168.2.40/24

#portas

acl Safe_ports port 80 21 70 210 280 488 591 777 # portas padroes
acl Safe_ports port 443 # https
acl SSL_ports port 443 563 #ssl
acl Safe_ports port 1025-65535 #portas altas

acl CONNECT method CONNECT

auth_param basic program /usr/lib64/squid/ncsa_auth /etc/squid/passwd
acl autentica proxy_auth REQUIRED

acl blocksites dstdomain "/etc/squid/bloqueados" <<< dentro desse arquivo tu deve obrigatoriamente colocar domínios (.google.com, .facebook.com, um por linha)
acl blockkeywords url_regex -i "/etc/squid/palavras" <<< dentro desse arquivo tu deve colocar palavras, uma por linha.

#permissoes

http_access allow localhost manager
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny blocksites
http_access deny blockkeywords
http_access deny to_localhost

http_access allow autentica
http_access deny !autentica
http_access allow localnet

http_access deny all

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440

Reinicie o Squid3 e teste.

http://www.squid-cache.org/Versions/v3/3.1/cfgman/acl.html

isra
(usa Debian)

Enviado em 12/01/2016 - 10:24h

Blz deu certo, vlw galera!!!

Vcs são d+

Ai, eu gostaria de saber como faz a autenticação, e faço pra ter o historico da navegação pelo Sarg.

Desde ja agradeço!

Abraço!