tingolopes
(usa Debian)
Enviado em 13/05/2011 - 09:49h
Bem. O endereco que eu tinha ref ao servidor não pingou nem aqui nem na minha casa (onde tenho adsl normal e o msn funciona) Aqui tambem não gerou logs. Veja que esse meu problema não é igual ao relatado no link do jeanldias. Aqui parece que o MSN tenta buscar uma url invalida e o squid bloqueia ele. Fiz um segundo teste hoje.
Tenho a seguinte regra:
echo -n "Excluindo a maquina especifica do proxy"
libera_proxy='/usr/local/bin/libera_proxy'
for i in `cat $libera_proxy`; do
$IPTABLES -t nat -A PREROUTING -i $IF_INTERNA -s $i -p tcp --dport 80 -j ACCEPT
$IPTABLES -t nat -A PREROUTING -i $IF_INTERNA -s $i -p tcp --dport 8080 -j ACCEPT
$IPTABLES -t nat -A PREROUTING -i $IF_INTERNA -s $i -p tcp --dport 443 -j ACCEPT
done
echo -n "...."
echo "REGRA APLICADA.................[ OK ]"
Ai dentro do arquivo libera_proxy tenho a lista de ips da rede interna que não vao passar pelo squid. Coloquei o meu IP na lista, restartei o firewall e deixei de proposito o proxy nos navegadores pra usar o proxy mesmo estando fora dele.
Curioso é que dai funcionou o msn, acessou as URL do msn pra conectar normal.
Tá aqui o LOG com o ip 10.0.0.5 fora do squid.
root@srvfw:/# tail -f /var/log/squid/access.log | grep 10.0.0.5
1305289087.883 8311 10.0.0.5 TCP_MISS/200 13468 CONNECT addons.mozilla.org:443 - DIRECT/63.245.209.91 -
1305289097.244 18 10.0.0.5 TCP_HIT/200 2208 GET
http://evsecure-ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRFp9TUB3UaX73tHhkdSo3sUtJBVQQU%2FIpQ... - NONE/- application/ocsp-response
1305289110.770 1690 10.0.0.5 TCP_MISS/200 8711 CONNECT byrdr.omega.contacts.msn.com:443 - DIRECT/207.46.118.178 -
1305289112.500 3420 10.0.0.5 TCP_MISS/200 8259 CONNECT directory.services.live.com:443 - DIRECT/65.54.167.91 -
1305289113.425 2651 10.0.0.5 TCP_MISS/200 71113 CONNECT secure.wlxrs.com:443 - DIRECT/96.17.56.124 -
1305289114.004 1500 10.0.0.5 TCP_MISS/200 8954 CONNECT byrdr.omega.contacts.msn.com:443 - DIRECT/207.46.118.178 -
1305289119.059 5605 10.0.0.5 TCP_MISS/200 38955 CONNECT proxy-bay.contacts.msn.com:443 - DIRECT/207.46.118.183 -
1305289120.077 1012 10.0.0.5 TCP_MISS/200 4191 POST
http://sup.live.com/whatsnew/whatsnewservice.asmx - DIRECT/65.54.167.92 text/xml
1305289121.982 281 10.0.0.5 TCP_MISS/200 2120 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.10 text/html
1305289122.031 0 10.0.0.5 TCP_DENIED/403 626 GET
http://ads2.msads.net/CIS/33/000/000/000/015/501.png - NONE/- text/html
1305289122.138 437 10.0.0.5 TCP_MISS/200 1971 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.9 text/html
1305289122.146 2751 10.0.0.5 TCP_MISS/200 45434 CONNECT secure.wlxrs.com:443 - DIRECT/96.17.56.124 -
1305289122.154 446 10.0.0.5 TCP_MISS/200 1970 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.8 text/html
1305289122.170 468 10.0.0.5 TCP_MISS/200 2123 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.8 text/html
1305289122.179 0 10.0.0.5 TCP_DENIED/403 626 GET
http://ads2.msads.net/CIS/108/000/000/000/008/100.png - NONE/- text/html
1305289122.188 482 10.0.0.5 TCP_MISS/200 2084 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.9 text/html
1305289122.203 490 10.0.0.5 TCP_MISS/200 1971 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.9 text/html
1305289122.220 512 10.0.0.5 TCP_MISS/200 2132 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.9 text/html
1305289122.234 518 10.0.0.5 TCP_MISS/200 1970 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.9 text/html
1305289122.250 531 10.0.0.5 TCP_MISS/200 1971 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.8 text/html
1305289122.285 576 10.0.0.5 TCP_MISS/200 2147 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.8 text/html
1305289122.301 583 10.0.0.5 TCP_MISS/200 2142 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.8 text/html
1305289122.317 600 10.0.0.5 TCP_MISS/200 1970 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.8 text/html
1305289122.327 0 10.0.0.5 TCP_DENIED/403 626 GET
http://ads2.msads.net/CIS/67/000/000/000/015/014.png - NONE/- text/html
1305289122.333 619 10.0.0.5 TCP_MISS/200 2138 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.8 text/html
1305289122.335 0 10.0.0.5 TCP_DENIED/403 626 GET
http://ads2.msads.net/CIS/100/000/000/000/014/628.png - NONE/- text/html
1305289122.342 0 10.0.0.5 TCP_DENIED/403 626 GET
http://ads2.msads.net/CIS/13/000/000/000/007/863.png - NONE/- text/html
1305289122.345 0 10.0.0.5 TCP_DENIED/403 626 GET
http://ads2.msads.net/CIS/47/000/000/000/013/660.png - NONE/- text/html
1305289122.350 632 10.0.0.5 TCP_MISS/200 2164 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.9 text/html
1305289122.353 0 10.0.0.5 TCP_DENIED/403 626 GET
http://ads2.msads.net/CIS/27/000/000/000/014/832.png - NONE/- text/html
1305289122.366 650 10.0.0.5 TCP_MISS/200 2101 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.9 text/html
1305289122.368 0 10.0.0.5 TCP_DENIED/403 626 GET
http://ads2.msads.net/CIS/86/000/000/000/013/030.png - NONE/- text/html
1305289122.377 0 10.0.0.5 TCP_DENIED/403 626 GET
http://ads2.msads.net/CIS/83/000/000/000/015/413.png - NONE/- text/html
1305289123.192 824 10.0.0.5 TCP_MISS/200 1081 GET
http://tdy.br.msn.com/scf.aspx - DIRECT/65.55.17.30 text/xml
1305289123.339 972 10.0.0.5 TCP_MISS/200 1434 GET
http://messenger.games.msn.com/scf/Production/imgames.pt-br.xml - DIRECT/65.52.137.44 text/xml
1305289124.694 280 10.0.0.5 TCP_MISS/200 958 GET
http://tdy.br.msn.com/scf.aspx - DIRECT/65.55.17.30 text/xml
1305289125.028 614 10.0.0.5 TCP_MISS/200 1322 GET
http://messenger.games.msn.com/scf/Production/imgames.pt-br.xml - DIRECT/65.52.137.44 text/xml
1305289125.629 935 10.0.0.5 TCP_MISS/200 1342 CONNECT secure.wlxrs.com:443 - DIRECT/96.17.56.124 -
1305289125.866 233 10.0.0.5 TCP_MISS/200 1634 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.9 text/html
1305289128.250 0 10.0.0.5 TCP_IMS_HIT/304 381 GET
http://mscrl.microsoft.com/pki/mscorp/crl/mswww(5).crl - NONE/- application/pkix-crl
1305289128.260 0 10.0.0.5 TCP_IMS_HIT/304 381 GET
http://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(8).crl - NONE/- application/pkix-crl
1305289132.037 7000 10.0.0.5 TCP_MISS/200 1374 CONNECT secure.wlxrs.com:443 - DIRECT/96.17.56.124 -
1305289132.271 293 10.0.0.5 TCP_MISS/302 1355 GET
http://tdy.br.msn.com/w4_HojeNoMSN.aspx? - DIRECT/65.55.17.30 text/html
1305289132.701 658 10.0.0.5 TCP_MISS/200 4961 GET
http://view.atdmt.com/MBZ/iview/262423627/direct;;wi.300;hi.250/01? - DIRECT/65.55.116.181 text/html
1305289132.789 77 10.0.0.5 TCP_MEM_HIT/200 388 GET
http://rmd.atdmt.com/tl/DocumentDotWrite.js - NONE/- application/x-javascript
1305289132.935 659 10.0.0.5 TCP_MISS/200 16457 GET
http://tdy.br.msn.com/w4_HojeNoMSN.aspx? - DIRECT/65.55.17.30 text/html
1305289132.950 954 10.0.0.5 TCP_MISS/200 4407 GET
http://byfiles.storage.msn.com/y1m_yhk3tW-rT-lID5H5rADXEOMhfz-IwH8KdDYzd1Ld8lqoOz9BvSpmWzXwmjvTVcnG8...? - DIRECT/65.54.191.45 image/jpeg
1305289133.076 100 10.0.0.5 TCP_HIT/200 7717 GET
http://col.stc.s-msn.com/br/sc/css/00/de6d0a0deb846d74e5b9b71149df73.css - NONE/- text/css
1305289133.095 8393 10.0.0.5 TCP_MISS/200 3192 CONNECT secure.wlxrs.com:443 - DIRECT/96.17.56.124 -
1305289133.097 0 10.0.0.5 TCP_HIT/200 1051 GET
http://col.stc.s-msn.com/br/sc/css/04/d118563521a79ab80925dc27037f90.css - NONE/- text/css
1305289133.185 383 10.0.0.5 TCP_MISS/200 20367 GET
http://spe.atdmt.com/ds/2NMBZBRAZPPO/back_up_300x250_022.gif? - DIRECT/189.11.250.27 image/gif
1305289133.188 88 10.0.0.5 TCP_HIT/200 26072 GET
http://col.stj.s-msn.com/br/sc/js/jquery/jquery-1.4.2.min.js - NONE/- application/x-javascript
1305289133.443 2 10.0.0.5 TCP_HIT/200 15479 GET
http://col.stj.s-msn.com/br/sc/js/1c/29e777e0fe0f82b53accbc0a2708dd.js - NONE/- application/x-javascript
1305289133.613 0 10.0.0.5 TCP_HIT/200 9776 GET
http://analytics.live.com/analytics/wlAnalytics.js - NONE/- application/x-javascript
1305289133.622 8925 10.0.0.5 TCP_MISS/200 3096 CONNECT secure.wlxrs.com:443 - DIRECT/96.17.56.124 -
1305289133.684 77 10.0.0.5 TCP_DENIED/403 626 GET
http://ads1.msn.com/library/dap.js - NONE/- text/html
1305289133.848 156 10.0.0.5 TCP_MISS/302 745 GET
http://b.scorecardresearch.com/b? - DIRECT/189.11.250.65 -
1305289134.048 197 10.0.0.5 TCP_REFRESH_HIT/200 442 GET
http://www.bing.com/partner/primedns.gif - DIRECT/189.11.250.122 image/gif
1305289134.085 37 10.0.0.5 TCP_HIT/200 2820 GET
http://col.stc.s-msn.com/br/sc/i/66/22614ba0edc080304aad6d0d0b7a7c.gif - NONE/- image/gif
1305289134.091 410 10.0.0.5 TCP_MISS/200 396 GET
http://view.atdmt.com/action/drv_MSN_Homepage/nc? - DIRECT/65.55.116.181 image/gif
1305289134.092 0 10.0.0.5 TCP_HIT/200 16126 GET
http://col.stb00.s-msn.com/i/B6/7C5C992CEEBB6C181D445C15E7ACF.jpg - NONE/- image/jpeg
1305289134.096 0 10.0.0.5 TCP_HIT/200 8487 GET
http://col.stb00.s-msn.com/i/BB/372EC82E7D3DB5C1A5FBDCF7D4C542.jpg - NONE/- image/jpeg
1305289134.178 78 10.0.0.5 TCP_HIT/200 13151 GET
http://col.stb00.s-msn.com/i/15/E49C9B62606925D9F44290149765.jpg - NONE/- image/jpeg
1305289134.181 77 10.0.0.5 TCP_MEM_HIT/200 7998 GET
http://col.stb01.s-msn.com/i/F7/F831F2A6943C206366BFD8D39BEFC.jpg - NONE/- image/jpeg
1305289134.185 1 10.0.0.5 TCP_HIT/200 14144 GET
http://col.stb00.s-msn.com/i/13/D076ECBF725E44ED2877A7F2B3D33.jpg - NONE/- image/jpeg
1305289134.188 0 10.0.0.5 TCP_MEM_HIT/200 8319 GET
http://col.stb00.s-msn.com/i/A9/AA8AE1E49D24D331EC3C89268F56B.jpg - NONE/- image/jpeg
1305289134.192 0 10.0.0.5 TCP_HIT/200 1040 GET
http://col.stb00.s-msn.com/i/EC/548EBD4F5663599EEF1338BC8348.jpg - NONE/- image/jpeg
1305289134.195 0 10.0.0.5 TCP_HIT/200 1292 GET
http://col.stb00.s-msn.com/i/1E/8AE65A9A47C0FF81AB3049BB3109A.jpg - NONE/- image/jpeg
1305289134.197 0 10.0.0.5 TCP_HIT/200 1285 GET
http://col.stb00.s-msn.com/i/DA/4D60CD9B104D64F1BD29232C85AC3B.jpg - NONE/- image/jpeg
1305289134.200 0 10.0.0.5 TCP_HIT/200 1294 GET
http://col.stb01.s-msn.com/i/83/334B22ABAE31C3339BDAB33857E93.jpg - NONE/- image/jpeg
1305289134.203 0 10.0.0.5 TCP_HIT/200 6080 GET
http://col.stc.s-msn.com/br/sc/i/a7/621113e4dba40c084a67bd15190275.gif - NONE/- image/gif
1305289134.263 582 10.0.0.5 TCP_MISS/200 548 GET
http://udc.msn.com/c.gif? - DIRECT/207.46.140.21 image/gif
1305289134.268 649 10.0.0.5 TCP_MISS/204 451 GET
http://amer.rel.msn.com/default.aspx? - DIRECT/207.46.140.46 -
1305289134.523 317 10.0.0.5 TCP_MISS/200 6590 GET
http://col.stb00.s-msn.com/i/99/3D2404DA71CFED1C2885868C86BB.jpg - DIRECT/65.54.85.133 image/jpeg
1305289134.582 311 10.0.0.5 TCP_MISS/200 9221 GET
http://col.stb00.s-msn.com/i/D5/E762CB31EC3079E0E7C0EA716A62E3.jpeg - DIRECT/65.54.85.138 image/jpeg
1305289134.646 378 10.0.0.5 TCP_MISS/200 10668 GET
http://col.stb01.s-msn.com/i/F0/B1B33BCADD33938D01992E34D3BCC.jpg - DIRECT/65.54.85.133 image/jpeg
1305289134.653 0 10.0.0.5 TCP_MEM_HIT/200 7609 GET
http://col.stb01.s-msn.com/i/97/9497315B8D8FE57E56B98B14F920.jpg - NONE/- image/jpeg
1305289134.658 0 10.0.0.5 TCP_MEM_HIT/200 4629 GET
http://col.stb01.s-msn.com/i/E6/B84DA51CA8BB2670D25D7E22DB3CD.jpg - NONE/- image/jpeg
1305289134.664 0 10.0.0.5 TCP_MEM_HIT/200 5685 GET
http://col.stb00.s-msn.com/i/4D/E94EF2569A96D626C5C38D7873A.jpg - NONE/- image/jpeg
1305289134.761 233 10.0.0.5 TCP_MISS/200 10320 GET
http://col.stb00.s-msn.com/i/F9/57A0D4A5928F768CF9859F541929B.jpg - DIRECT/65.54.85.133 image/jpeg
1305289134.808 598 10.0.0.5 TCP_MISS/200 6892 GET
http://col.stb01.s-msn.com/i/63/7BD761BF19F6EC28A9BC32E75D9.jpg - DIRECT/65.54.85.138 image/jpeg
1305289134.813 0 10.0.0.5 TCP_HIT/200 4983 GET
http://col.stb00.s-msn.com/i/4B/C3BE63631964C1C33D232959581.jpg - NONE/- image/jpeg
1305289134.821 1 10.0.0.5 TCP_HIT/200 10265 GET
http://col.stb01.s-msn.com/i/9E/A2338B46751492F93B6D5DDC21836.gif - NONE/- image/gif
1305289134.827 0 10.0.0.5 TCP_HIT/200 613 GET
http://col.stb01.s-msn.com/i/B4/4917556499DA7F9EAF749DBBFBB1.gif - NONE/- image/gif
1305289134.916 245 10.0.0.5 TCP_MISS/200 12955 GET
http://col.stb01.s-msn.com/i/4E/B9DF6C1FD90E48251397BA68B3B18.jpg - DIRECT/65.54.85.133 image/jpeg
1305289134.962 40 10.0.0.5 TCP_MISS/204 395 GET
http://b.scorecardresearch.com/b2? - DIRECT/189.11.250.65 -
1305289135.021 434 10.0.0.5 TCP_MISS/200 3147 GET
http://col.stb01.s-msn.com/i/5C/8A331B189AEBD94F857C2D1FE5059.jpg - DIRECT/65.54.85.138 image/jpeg
1305289135.188 419 10.0.0.5 TCP_MISS/200 9973 GET
http://col.stb01.s-msn.com/i/39/2ED5C77A3D4F3AB86FBCC86082.jpg - DIRECT/65.54.85.133 image/jpeg
1305289135.248 42 10.0.0.5 TCP_MISS/204 596 GET
http://b.scorecardresearch.com/b? - DIRECT/189.11.250.65 -
1305289135.489 658 10.0.0.5 TCP_MISS/302 963 GET
http://c.msn.com/c.gif? - DIRECT/64.4.21.39 -
1305289135.757 550 10.0.0.5 TCP_MISS/200 1066 GET
http://analytics.live.com/Sync.html? - DIRECT/65.54.77.92 text/html
1305289136.017 253 10.0.0.5 TCP_MISS/200 2478 GET
http://analytics.live.com/Scripts/wlHelper.js? - DIRECT/65.54.77.92 application/x-javascript
1305289136.103 609 10.0.0.5 TCP_MISS/302 826 GET
http://c.atdmt.com/c.gif? - DIRECT/65.55.239.164 -
1305289136.385 277 10.0.0.5 TCP_MISS/200 776 GET
http://c.msn.com/c.gif? - DIRECT/64.4.21.39 image/gif
1305289136.413 649 10.0.0.5 TCP_MISS/200 1954 GET
http://analytics.atdmt.com/Scripts/wlHelper.js? - DIRECT/64.4.18.40 application/x-javascript
1305289136.518 76 10.0.0.5 TCP_MEM_HIT/200 933 GET
http://analytics.msn.com/Include.html - NONE/- text/html
1305289136.964 240 10.0.0.5 TCP_MISS/200 1642 GET
http://rad.msn.com/ADSAdClient31.dll? - DIRECT/65.55.192.9 text/html
1305289137.293 577 10.0.0.5 TCP_MISS/200 548 GET
http://udc.msn.com/c.gif? - DIRECT/207.46.140.21 image/gif
1305289137.662 677 10.0.0.5 TCP_MISS/200 5074 GET
http://view.atdmt.com/MBZ/iview/msnnkbrc001234x60XimsptbXunknown0000001mbz/direct;wi.234;hi.60/01? - DIRECT/65.55.116.181 text/html
1305289137.785 96 10.0.0.5 TCP_MISS/200 6597 GET
http://spe.atdmt.com/ds/2NMBZBRAZIVO/234x60_MSN_modem.jpg? - DIRECT/189.11.250.27 image/jpeg
1305289145.663 911 10.0.0.5 TCP_MISS/200 337 POST
http://ssw.live.com/uploaddata.aspx - DIRECT/65.55.93.46 -
1305289147.786 467334 10.0.0.5 TCP_MISS/200 70351 CONNECT mail.google.com:443 - DIRECT/64.233.163.83 -
^C
root@srvfw:/#
Agora tirei o ip do firewall e voltei ele como tava, passando pelo squid obrigatoriamente. Muito curioso é que o msn ta conectando agora normal.
Uma duvida. Tem o mesmo efeito force-reload e o restart para o squid?
Porque eu sei que se restartar o squid agora o msn vai parar de novo. Esqueci de dizer que uso o force-reload pois não posso ficar derrubando os cliente o tempo todo. Sei lá, parece um cache.
