forum.opennet.ru

Составление сообщения

Исходное сообщение

"проблемы с acl"
Отправлено minimax_07, 29-Апр-11 13:28

> :) , хотите потом весь вывод здесь увидеть? :)
Да вы прямо Нострадамус ))))
Пробовал сам разобраться - не вышло...
Поэтому выкладывая конфиг и кусок лога кэша, который пишет дебагер при попытке загрузить, например, гугл. Давайте вместе анализить
конфиг:
http_port 192.168.0.1:3128
cache_mem 128 MB
error_directory /usr/local/etc/squid/errors/Russian-koi8-r
dns_nameservers 212.44.130.6
cache_dir ufs /usr/local/squid/cache 5000 16 256
cache_access_log /usr/local/squid/logs/access.log
cache_log /usr/local/squid/logs/cache.log
cache_store_log /usr/local/squid/logs/store.log
pid_filename /usr/local/squid/logs/squid.pid
quick_abort_pct 60
negative_ttl 1 minutes
positive_dns_ttl 6 hours
negative_dns_ttl 5 minutes
half_closed_clients on
acl AL dst 192.168.0.2/255.255.255.255
http_access allow AL
http_access deny all
forwarded_for on
client_db on
log_fqdn on
cache_effective_user squid
cache_effective_group squid
ftp_user 790@kaskad.ru
debug_options AL,1 33,2 28,9
лог:
2011/04/29 14:54:55| The request GET http://google.ru/ is DENIED, because it matched 'all'
2011/04/29 14:54:55| The reply for GET http://google.ru/ is ALLOWED, because it matched 'all'
2011/04/29 14:54:55| aclCheckFast: list: 0x285058f0
2011/04/29 14:54:55| aclMatchAclList: checking all
2011/04/29 14:54:55| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
2011/04/29 14:54:55| aclMatchIp: '192.168.0.2' found
2011/04/29 14:54:55| aclMatchAclList: returning 1
2011/04/29 14:54:56| aclCheck: checking 'http_access allow manager localhost'
2011/04/29 14:54:56| aclMatchAclList: checking manager
2011/04/29 14:54:56| aclMatchAcl: checking 'acl manager proto cache_object'
2011/04/29 14:54:56| aclMatchAclList: no match, returning 0
2011/04/29 14:54:56| aclCheck: checking 'http_access deny manager'
2011/04/29 14:54:56| aclMatchAclList: checking manager
2011/04/29 14:54:56| aclMatchAcl: checking 'acl manager proto cache_object'
2011/04/29 14:54:56| aclMatchAclList: no match, returning 0
2011/04/29 14:54:56| aclCheck: checking 'http_access deny !Safe_ports'
2011/04/29 14:54:56| aclMatchAclList: checking !Safe_ports
2011/04/29 14:54:56| aclMatchAcl: checking 'acl Safe_ports port 80 # http'
2011/04/29 14:54:56| aclMatchAclList: no match, returning 0
2011/04/29 14:54:56| aclCheck: checking 'http_access deny CONNECT !SSL_ports'
2011/04/29 14:54:56| aclMatchAclList: checking CONNECT
2011/04/29 14:54:56| aclMatchAcl: checking 'acl CONNECT method CONNECT'
2011/04/29 14:54:56| aclMatchAclList: no match, returning 0
2011/04/29 14:54:56| aclCheck: checking 'http_access deny all'
2011/04/29 14:54:56| aclMatchAclList: checking all
2011/04/29 14:54:56| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
2011/04/29 14:54:56| aclMatchIp: '192.168.0.2' found
2011/04/29 14:54:56| aclMatchAclList: returning 1
2011/04/29 14:54:56| aclCheck: match found, returning 0
2011/04/29 14:54:56| aclCheckCallback: answer=0
2011/04/29 14:54:56| The request GET http://google.ru/ is DENIED, because it matched 'all'
2011/04/29 14:54:56| The reply for GET http://google.ru/ is ALLOWED, because it matched 'all'
2011/04/29 15:22:44| aclCheckFast: list: 0x285058f0
2011/04/29 15:22:44| aclMatchAclList: checking all
2011/04/29 15:22:44| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
2011/04/29 15:22:44| aclMatchIp: '192.168.0.2' found
2011/04/29 15:22:44| aclMatchAclList: returning 1
2011/04/29 15:22:44| aclCheck: checking 'http_access allow manager localhost'
2011/04/29 15:22:44| aclMatchAclList: checking manager
2011/04/29 15:22:44| aclMatchAcl: checking 'acl manager proto cache_object'
2011/04/29 15:22:44| aclMatchAclList: no match, returning 0
2011/04/29 15:22:44| aclCheck: checking 'http_access deny manager'
2011/04/29 15:22:44| aclMatchAclList: checking manager
2011/04/29 15:22:44| aclMatchAcl: checking 'acl manager proto cache_object'
2011/04/29 15:22:44| aclMatchAclList: no match, returning 0
2011/04/29 15:22:44| aclCheck: checking 'http_access deny !Safe_ports'
2011/04/29 15:22:44| aclMatchAclList: checking !Safe_ports
2011/04/29 15:22:44| aclMatchAcl: checking 'acl Safe_ports port 80 # http'
2011/04/29 15:22:44| aclMatchAclList: no match, returning 0
2011/04/29 15:22:44| aclCheck: checking 'http_access deny CONNECT !SSL_ports'
2011/04/29 15:22:44| aclMatchAclList: checking CONNECT
2011/04/29 15:22:44| aclMatchAcl: checking 'acl CONNECT method CONNECT'
2011/04/29 15:22:44| aclMatchAclList: no match, returning 0
2011/04/29 15:22:44| aclCheck: checking 'http_access deny all'
2011/04/29 15:22:44| aclMatchAclList: checking all
2011/04/29 15:22:44| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
2011/04/29 15:22:44| aclMatchIp: '192.168.0.2' found
2011/04/29 15:22:44| aclMatchAclList: returning 1
2011/04/29 15:22:44| aclCheck: match found, returning 0
2011/04/29 15:22:44| aclCheckCallback: answer=0

Исходное сообщение
"проблемы с acl" Отправлено minimax_07, 29-Апр-11 13:28
> :) , хотите потом весь вывод здесь увидеть? :) Да вы прямо Нострадамус )))) Пробовал сам разобраться - не вышло... Поэтому выкладывая конфиг и кусок лога кэша, который пишет дебагер при попытке загрузить, например, гугл. Давайте вместе анализить конфиг: http_port 192.168.0.1:3128 cache_mem 128 MB error_directory /usr/local/etc/squid/errors/Russian-koi8-r dns_nameservers 212.44.130.6 cache_dir ufs /usr/local/squid/cache 5000 16 256 cache_access_log /usr/local/squid/logs/access.log cache_log /usr/local/squid/logs/cache.log cache_store_log /usr/local/squid/logs/store.log pid_filename /usr/local/squid/logs/squid.pid quick_abort_pct 60 negative_ttl 1 minutes positive_dns_ttl 6 hours negative_dns_ttl 5 minutes half_closed_clients on acl AL dst 192.168.0.2/255.255.255.255 http_access allow AL http_access deny all forwarded_for on client_db on log_fqdn on cache_effective_user squid cache_effective_group squid ftp_user 790@kaskad.ru debug_options AL,1 33,2 28,9 лог: 2011/04/29 14:54:55\| The request GET http://google.ru/ is DENIED, because it matched 'all' 2011/04/29 14:54:55\| The reply for GET http://google.ru/ is ALLOWED, because it matched 'all' 2011/04/29 14:54:55\| aclCheckFast: list: 0x285058f0 2011/04/29 14:54:55\| aclMatchAclList: checking all 2011/04/29 14:54:55\| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' 2011/04/29 14:54:55\| aclMatchIp: '192.168.0.2' found 2011/04/29 14:54:55\| aclMatchAclList: returning 1 2011/04/29 14:54:56\| aclCheck: checking 'http_access allow manager localhost' 2011/04/29 14:54:56\| aclMatchAclList: checking manager 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl manager proto cache_object' 2011/04/29 14:54:56\| aclMatchAclList: no match, returning 0 2011/04/29 14:54:56\| aclCheck: checking 'http_access deny manager' 2011/04/29 14:54:56\| aclMatchAclList: checking manager 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl manager proto cache_object' 2011/04/29 14:54:56\| aclMatchAclList: no match, returning 0 2011/04/29 14:54:56\| aclCheck: checking 'http_access deny !Safe_ports' 2011/04/29 14:54:56\| aclMatchAclList: checking !Safe_ports 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl Safe_ports port 80 # http' 2011/04/29 14:54:56\| aclMatchAclList: no match, returning 0 2011/04/29 14:54:56\| aclCheck: checking 'http_access deny CONNECT !SSL_ports' 2011/04/29 14:54:56\| aclMatchAclList: checking CONNECT 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl CONNECT method CONNECT' 2011/04/29 14:54:56\| aclMatchAclList: no match, returning 0 2011/04/29 14:54:56\| aclCheck: checking 'http_access deny all' 2011/04/29 14:54:56\| aclMatchAclList: checking all 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' 2011/04/29 14:54:56\| aclMatchIp: '192.168.0.2' found 2011/04/29 14:54:56\| aclMatchAclList: returning 1 2011/04/29 14:54:56\| aclCheck: match found, returning 0 2011/04/29 14:54:56\| aclCheckCallback: answer=0 2011/04/29 14:54:56\| The request GET http://google.ru/ is DENIED, because it matched 'all' 2011/04/29 14:54:56\| The reply for GET http://google.ru/ is ALLOWED, because it matched 'all' 2011/04/29 15:22:44\| aclCheckFast: list: 0x285058f0 2011/04/29 15:22:44\| aclMatchAclList: checking all 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' 2011/04/29 15:22:44\| aclMatchIp: '192.168.0.2' found 2011/04/29 15:22:44\| aclMatchAclList: returning 1 2011/04/29 15:22:44\| aclCheck: checking 'http_access allow manager localhost' 2011/04/29 15:22:44\| aclMatchAclList: checking manager 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl manager proto cache_object' 2011/04/29 15:22:44\| aclMatchAclList: no match, returning 0 2011/04/29 15:22:44\| aclCheck: checking 'http_access deny manager' 2011/04/29 15:22:44\| aclMatchAclList: checking manager 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl manager proto cache_object' 2011/04/29 15:22:44\| aclMatchAclList: no match, returning 0 2011/04/29 15:22:44\| aclCheck: checking 'http_access deny !Safe_ports' 2011/04/29 15:22:44\| aclMatchAclList: checking !Safe_ports 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl Safe_ports port 80 # http' 2011/04/29 15:22:44\| aclMatchAclList: no match, returning 0 2011/04/29 15:22:44\| aclCheck: checking 'http_access deny CONNECT !SSL_ports' 2011/04/29 15:22:44\| aclMatchAclList: checking CONNECT 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl CONNECT method CONNECT' 2011/04/29 15:22:44\| aclMatchAclList: no match, returning 0 2011/04/29 15:22:44\| aclCheck: checking 'http_access deny all' 2011/04/29 15:22:44\| aclMatchAclList: checking all 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' 2011/04/29 15:22:44\| aclMatchIp: '192.168.0.2' found 2011/04/29 15:22:44\| aclMatchAclList: returning 1 2011/04/29 15:22:44\| aclCheck: match found, returning 0 2011/04/29 15:22:44\| aclCheckCallback: answer=0

Ваше сообщение
Имя*:
EMail:	Для отправки новых сообщений в текущей нити на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	>> :) , хотите потом весь вывод здесь увидеть? :) > Да вы прямо Нострадамус )))) > Пробовал сам разобраться - не вышло... > Поэтому выкладывая конфиг и кусок лога кэша, который пишет дебагер при попытке > загрузить, например, гугл. Давайте вместе анализить > конфиг: > http_port 192.168.0.1:3128 > cache_mem 128 MB > error_directory /usr/local/etc/squid/errors/Russian-koi8-r > dns_nameservers 212.44.130.6 > cache_dir ufs /usr/local/squid/cache 5000 16 256 > cache_access_log /usr/local/squid/logs/access.log > cache_log /usr/local/squid/logs/cache.log > cache_store_log /usr/local/squid/logs/store.log > pid_filename /usr/local/squid/logs/squid.pid > quick_abort_pct 60 > negative_ttl 1 minutes > positive_dns_ttl 6 hours > negative_dns_ttl 5 minutes > half_closed_clients on > acl AL dst 192.168.0.2/255.255.255.255 > http_access allow AL > http_access deny all > forwarded_for on > client_db on > log_fqdn on > cache_effective_user squid > cache_effective_group squid > ftp_user 790@kaskad.ru > debug_options AL,1 33,2 28,9 > лог: > 2011/04/29 14:54:55\| The request GET http://google.ru/ is DENIED, because it matched > 'all' > 2011/04/29 14:54:55\| The reply for GET http://google.ru/ is ALLOWED, because it matched > 'all' > 2011/04/29 14:54:55\| aclCheckFast: list: 0x285058f0 > 2011/04/29 14:54:55\| aclMatchAclList: checking all > 2011/04/29 14:54:55\| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' > 2011/04/29 14:54:55\| aclMatchIp: '192.168.0.2' found > 2011/04/29 14:54:55\| aclMatchAclList: returning 1 > 2011/04/29 14:54:56\| aclCheck: checking 'http_access allow manager localhost' > 2011/04/29 14:54:56\| aclMatchAclList: checking manager > 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl manager proto cache_object' > 2011/04/29 14:54:56\| aclMatchAclList: no match, returning 0 > 2011/04/29 14:54:56\| aclCheck: checking 'http_access deny manager' > 2011/04/29 14:54:56\| aclMatchAclList: checking manager > 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl manager proto cache_object' > 2011/04/29 14:54:56\| aclMatchAclList: no match, returning 0 > 2011/04/29 14:54:56\| aclCheck: checking 'http_access deny !Safe_ports' > 2011/04/29 14:54:56\| aclMatchAclList: checking !Safe_ports > 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl Safe_ports port 80 # http' > 2011/04/29 14:54:56\| aclMatchAclList: no match, returning 0 > 2011/04/29 14:54:56\| aclCheck: checking 'http_access deny CONNECT !SSL_ports' > 2011/04/29 14:54:56\| aclMatchAclList: checking CONNECT > 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl CONNECT method CONNECT' > 2011/04/29 14:54:56\| aclMatchAclList: no match, returning 0 > 2011/04/29 14:54:56\| aclCheck: checking 'http_access deny all' > 2011/04/29 14:54:56\| aclMatchAclList: checking all > 2011/04/29 14:54:56\| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' > 2011/04/29 14:54:56\| aclMatchIp: '192.168.0.2' found > 2011/04/29 14:54:56\| aclMatchAclList: returning 1 > 2011/04/29 14:54:56\| aclCheck: match found, returning 0 > 2011/04/29 14:54:56\| aclCheckCallback: answer=0 > 2011/04/29 14:54:56\| The request GET http://google.ru/ is DENIED, because it matched > 'all' > 2011/04/29 14:54:56\| The reply for GET http://google.ru/ is ALLOWED, because it matched > 'all' > 2011/04/29 15:22:44\| aclCheckFast: list: 0x285058f0 > 2011/04/29 15:22:44\| aclMatchAclList: checking all > 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' > 2011/04/29 15:22:44\| aclMatchIp: '192.168.0.2' found > 2011/04/29 15:22:44\| aclMatchAclList: returning 1 > 2011/04/29 15:22:44\| aclCheck: checking 'http_access allow manager localhost' > 2011/04/29 15:22:44\| aclMatchAclList: checking manager > 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl manager proto cache_object' > 2011/04/29 15:22:44\| aclMatchAclList: no match, returning 0 > 2011/04/29 15:22:44\| aclCheck: checking 'http_access deny manager' > 2011/04/29 15:22:44\| aclMatchAclList: checking manager > 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl manager proto cache_object' > 2011/04/29 15:22:44\| aclMatchAclList: no match, returning 0 > 2011/04/29 15:22:44\| aclCheck: checking 'http_access deny !Safe_ports' > 2011/04/29 15:22:44\| aclMatchAclList: checking !Safe_ports > 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl Safe_ports port 80 # http' > 2011/04/29 15:22:44\| aclMatchAclList: no match, returning 0 > 2011/04/29 15:22:44\| aclCheck: checking 'http_access deny CONNECT !SSL_ports' > 2011/04/29 15:22:44\| aclMatchAclList: checking CONNECT > 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl CONNECT method CONNECT' > 2011/04/29 15:22:44\| aclMatchAclList: no match, returning 0 > 2011/04/29 15:22:44\| aclCheck: checking 'http_access deny all' > 2011/04/29 15:22:44\| aclMatchAclList: checking all > 2011/04/29 15:22:44\| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' > 2011/04/29 15:22:44\| aclMatchIp: '192.168.0.2' found > 2011/04/29 15:22:44\| aclMatchAclList: returning 1 > 2011/04/29 15:22:44\| aclCheck: match found, returning 0 > 2011/04/29 15:22:44\| aclCheckCallback: answer=0
	Введите код, изображенный на картинке:

При общении не допускается: неуважительное отношение к собеседнику, хамство, унизительное обращение, ненормативная лексика, переход на личности, агрессивное поведение, обесценивание собеседника, провоцирование флейма голословными и заведомо ложными заявлениями. Не отвечайте на сообщения, явно нарушающие правила - удаляются не только сами нарушения, но и все ответы на них. Лог модерирования.

Партнёры:

Хостинг:

Закладки на сайте
Проследить за страницей

Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру