Erros e mais erros em Squid Básico

dimoreira
(usa openSUSE)

Enviado em 02/06/2011 - 17:07h

Boa tarde, sou user do vol a um bom tempo, mas andei afastado da comunidade, e respectivamente do linux. Acontece que muita coisa mudou, e estou com problemas com o Squid3, fiz um arquivo básico para um proxy de onde estou trabalhando, mas encontrei N problemas. Abaixo colocarei meu squid.conf, seguido dos erros encontrados, quebrei a cabeça e diminui metade dos mesmos, mas alguns ainda não resolvi, possivelmente por diferença entre as versões.

Meu Squid.conf
---------------------------------------------------
http_port 3128 transparent
visible_hostname apolo

cache_mem 64 MB
maximum_object_size_in_memory 128 KB
maximum_object_size 256 MB
cache_dir ufs /cache 8192 16 256
#cache_acess_log /var/log/squid3/access.log

acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563 873
acl Safe_ports port 80 21 280 443 488 563 591 777 1025-65535
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

acl redelocal 192.168.1.0/24
http_access allow localhost
http_access allow redelocal

http_access deny all
----------------------------------------------------------

Erros encontrados
----------------------------------------------------------
2011/06/02 17:08:55| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2011/06/02 17:08:55| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable
2011/06/02 17:08:55| WARNING: You should probably remove '::/0' from the ACL named 'all'
2011/06/02 17:08:55| WARNING: Netmasks are deprecated. Please use CIDR masks instead.
2011/06/02 17:08:55| WARNING: IPv4 netmasks are particularly nasty when used to compare IPv6 to IPv4 ranges.
2011/06/02 17:08:55| WARNING: For now we will assume you meant to write /32
2011/06/02 17:08:55| aclParseAclLine: Invalid ACL type '192.168.1.0/24'
FATAL: Bungled squid.conf line 25: acl redelocal 192.168.1.0/24
Squid Cache (Version 3.1.11): Terminated abnormally.
CPU Usage: 0.012 seconds = 0.000 user + 0.012 sys
Maximum Resident Size: 16304 KB
Page faults with physical i/o: 1
2011/06/02 17:08:55| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2011/06/02 17:08:55| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable
2011/06/02 17:08:55| WARNING: You should probably remove '::/0' from the ACL named 'all'
2011/06/02 17:08:55| WARNING: Netmasks are deprecated. Please use CIDR masks instead.
2011/06/02 17:08:55| WARNING: IPv4 netmasks are particularly nasty when used to compare IPv6 to IPv4 ranges.
2011/06/02 17:08:55| WARNING: For now we will assume you meant to write /32
2011/06/02 17:08:55| aclParseAclLine: Invalid ACL type '192.168.1.0/24'
FATAL: Bungled squid.conf line 25: acl redelocal 192.168.1.0/24
Squid Cache (Version 3.1.11): Terminated abnormally.
CPU Usage: 0.016 seconds = 0.008 user + 0.008 sys
Maximum Resident Size: 16288 KB
Page faults with physical i/o: 0
------------------------------------------------------------------

Conforme eu ir encontrando alguma solução neste meio período, irei postando para facilitar a resolução do problema.

Desde já agradeço ^^

renato_pacheco
(usa Debian)

Enviado em 02/06/2011 - 17:13h

Vou consertar pra vc:

http_port 3128 intercept
visible_hostname apolo

cache_mem 64 MB
maximum_object_size_in_memory 128 KB
maximum_object_size 256 MB
cache_dir ufs /cache 8192 16 256
#cache_acess_log /var/log/squid3/access.log

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl SSL_ports port 443 563 873
acl Safe_ports port 80 21 280 443 488 563 591 777 1025-65535
acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

acl redelocal src 192.168.1.0/24
http_access allow localhost
http_access allow redelocal

http_access deny all

Pronto!

yros
(usa Slackware)

Enviado em 02/06/2011 - 17:14h

acl redelocal 192.168.1.0/24 tem que ficar assim:
acl redelocal src 192.168.1.0/24 ou assim
acl redelocal src 192.168.1.0/255.255.255.0


a acl que menciona all
tem que ficar assim

acl all src 0.0.0.0/0 ou
acl all src 0.0.0.0/32

dimoreira
(usa openSUSE)

Enviado em 02/06/2011 - 17:28h

Funcionando, agradeço a todos, espero me familiarizar logo com estas funcionalidades.

geanster
(usa Outra)

Enviado em 28/05/2013 - 11:03h

Por favor, poderia me ajudar?

Estou com o sequinte erro:

MT-S2:/etc/init.d# squid3 restart
2013/05/28 10:58:34| basic/auth_basic.cc(348) parse: unrecognised basic auth scheme parameter '/usr/lib/squid3/ncsa_auth'
2013/05/28 10:58:34| basic/auth_basic.cc(348) parse: unrecognised basic auth scheme parameter 'childrem'
2013/05/28 10:58:34| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2013/05/28 10:58:34| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable
2013/05/28 10:58:34| WARNING: You should probably remove '::/0' from the ACL named 'all'
2013/05/28 10:58:34| ERROR: '0.0.0.0/0' needs to be replaced by the term 'all'.
2013/05/28 10:58:34| SECURITY NOTICE: Overriding config setting. Using 'all' instead.
2013/05/28 10:58:34| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2013/05/28 10:58:34| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable
2013/05/28 10:58:34| WARNING: You should probably remove '::/0' from the ACL named 'all'
2013/05/28 10:58:34| WARNING: Netmasks are deprecated. Please use CIDR masks instead.
2013/05/28 10:58:34| WARNING: IPv4 netmasks are particularly nasty when used to compare IPv6 to IPv4 ranges.
2013/05/28 10:58:34| WARNING: For now we will assume you meant to write /24
2013/05/28 10:58:34| Can't use proxy auth because no authentication schemes are fully configured.
FATAL: ERROR: Invalid ACL: acl usuarios proxy_auth REQUIRED

Squid Cache (Version 3.1.20): Terminated abnormally.
CPU Usage: 0.004 seconds = 0.000 user + 0.004 sys
Maximum Resident Size: 15056 KB
Page faults with physical i/o: 0

rahremix
(usa Arch Linux)

Enviado em 28/05/2013 - 11:33h

Tente alterar seu squid.conf, na linha onde está 'auth_param ... childrem', mudando de childrem para children.



No lugar de "REQUIRED", coloque o arquivo com a lista de usuários ou o nome do usuário que você deseja inserir na acl 'usuarios'.

E, da próxima vez, abra um novo tópico, com uma descrição breve do problema no título, pois assim fica mais fácil para os outros usuários visualizarem seu problema.