Menú

Mostrar Mensajes

Esta sección te permite ver todos los mensajes escritos por este usuario. Ten en cuenta que sólo puedes ver los mensajes escritos en zonas a las que tienes acceso en este momento.

Menú Mostrar Mensajes

Mensajes - ernieball17

#1
Squid 2.7 & Squid 3.x / Re:Problema con Squid3
Agosto 18, 2016, 07:11:02 AM
Buenos días firecold, ahora mismo voy a ponerme a revisar las IPTABLES y a rearmar el squid.conf, destaco que es el primer squid web cache que hago, por eso tantos problemas jajajaja. Desde ya muchísimas gracias por la ayuda y apenas tenga resultados posteo aquí en el foro!!! Saludos!!!
#2
Squid 2.7 & Squid 3.x / Re:Problema con Squid3
Agosto 17, 2016, 03:35:29 PM
firecold, esto es lo que me muestra el squid -k parse

2016/08/17 17:20:19| Processing Configuration File: /etc/squid3/squid.conf (dept                                                     h 0)
2016/08/17 17:20:19| Processing: acl localhost src 127.0.0.1/32 ::1
2016/08/17 17:20:19| Processing: acl techtron src all
2016/08/17 17:20:19| Processing: acl SSL_ports port 443
2016/08/17 17:20:19| Processing: acl Safe_ports port 80         # http
2016/08/17 17:20:19| Processing: acl Safe_ports port 21         # ftp
2016/08/17 17:20:19| Processing: acl Safe_ports port 443                # https
2016/08/17 17:20:19| Processing: acl Safe_ports port 70         # gopher
2016/08/17 17:20:19| Processing: acl Safe_ports port 210                # wais
2016/08/17 17:20:19| Processing: acl Safe_ports port 1025-65535 # unregistered p                                                     orts
2016/08/17 17:20:19| Processing: acl Safe_ports port 280                # http-m                                                     gmt
2016/08/17 17:20:19| Processing: acl Safe_ports port 488                # gss-ht                                                     tp
2016/08/17 17:20:19| Processing: acl Safe_ports port 591                # filema                                                     ker
2016/08/17 17:20:19| Processing: acl Safe_ports port 777                # multil                                                     ing http
2016/08/17 17:20:19| Processing: acl CONNECT method CONNECT
2016/08/17 17:20:19| Processing: acl bogon src 192.168.0.0/16
2016/08/17 17:20:19| Processing: acl bogon src 172.16.0.0/12
2016/08/17 17:20:19| Processing: acl bogon src 10.0.0.0/8
2016/08/17 17:20:19| Processing: http_access allow techtron
2016/08/17 17:20:19| Processing: http_access allow localhost
2016/08/17 17:20:19| Processing: http_access deny all
2016/08/17 17:20:19| Processing: http_port 3128 intercept ignore-cc
2016/08/17 17:20:19| Starting Authentication on port [::]:3128
2016/08/17 17:20:19| Disabling Authentication on port [::]:3128 (interception en                                                     abled)
2016/08/17 17:20:19| Disabling IPv6 on port [::]:3128 (interception enabled)
2016/08/17 17:20:19| Processing: http_port 80 intercept
2016/08/17 17:20:19| Starting Authentication on port [::]:80
2016/08/17 17:20:19| Disabling Authentication on port [::]:80 (interception enab                                                     led)
2016/08/17 17:20:19| Disabling IPv6 on port [::]:80 (interception enabled)
2016/08/17 17:20:19| Processing: cache_replacement_policy heap LFUDA
2016/08/17 17:20:19| Processing: cache_swap_low 90
2016/08/17 17:20:19| Processing: cache_swap_high 95
2016/08/17 17:20:19| Processing: cache_dir aufs /var/spool/squid3 409600 16 256
2016/08/17 17:20:19| Processing: cache_mem 4096 MB
2016/08/17 17:20:19| Processing: maximum_object_size_in_memory 512 KB
2016/08/17 17:20:19| Processing: minimum_object_size 0 KB
2016/08/17 17:20:19| Processing: maximum_object_size 50 MB
2016/08/17 17:20:19| Processing: logfile_rotate 10
2016/08/17 17:20:19| Processing: memory_pools off
2016/08/17 17:20:19| Processing: quick_abort_min 0 KB
2016/08/17 17:20:19| Processing: quick_abort_max 0 KB
2016/08/17 17:20:19| Processing: log_icp_queries off
2016/08/17 17:20:19| Processing: client_db off
2016/08/17 17:20:19| Processing: buffered_logs on
2016/08/17 17:20:19| Processing: half_closed_clients off
2016/08/17 17:20:19| Processing: shutdown_lifetime 5 seconds
2016/08/17 17:20:19| Processing: via off
2016/08/17 17:20:19| Processing: reply_header_max_size 200 KB
2016/08/17 17:20:19| Processing: request_header_max_size 200 KB
2016/08/17 17:20:19| Processing: forwarded_for deleted
2016/08/17 17:20:19| Processing: refresh_pattern ^ftp: 1440 20% 10080
2016/08/17 17:20:19| Processing: refresh_pattern ^gopher: 1440 0% 1440
2016/08/17 17:20:19| Processing: refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 10                                                     080 90% 43200 override-expire ignore-no-cache ignore-no-store ignore-private
2016/08/17 17:20:19| Processing: refresh_pattern -i \.(iso|avi|wav|mp3|mp4|mpeg|                                                     swf|flv|x-flv)$ 43200 90% 432000 override-expire ignore-no-cache ignore-no-store                                                      ignore-private
2016/08/17 17:20:19| Processing: refresh_pattern -i \.(deb|rpm|exe|zip|tar|tgz|r                                                     am|rar|bin|ppt|doc|tiff)$ 10080 90% 43200 override-expire ignore-no-cache ignore                                                     -no-store ignore-private
2016/08/17 17:20:19| Processing: refresh_pattern -i \.index.(html|htm)$ 0 40% 10                                                     080
2016/08/17 17:20:19| Processing: refresh_pattern -i \.(html|htm|css|js)$ 1440 40                                                     % 40320
2016/08/17 17:20:19| Processing: refresh_pattern -i youtube.com/.* 10080 90% 432                                                     00
2016/08/17 17:20:19| Processing: refresh_pattern -i microsoft.com/.*\.(cab|exe|m                                                     s[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
2016/08/17 17:20:19| Processing: refresh_pattern -i windowsupdate.com/.*\.(cab|e                                                     xe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
2016/08/17 17:20:19| Processing: refresh_pattern -i windows.com/.*\.(cab|exe|ms[                                                     i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
2016/08/17 17:20:19| Processing: refresh_pattern . 0 40% 40320
2016/08/17 17:20:19| Processing: cache_effective_user techtron
2016/08/17 17:20:19| WARNING: use of 'override-expire' in 'refresh_pattern' viol                                                     ates HTTP
2016/08/17 17:20:19| WARNING: use of 'reload-into-ims' in 'refresh_pattern' viol                                                     ates HTTP
2016/08/17 17:20:19| WARNING: use of 'ignore-no-cache' in 'refresh_pattern' viol                                                     ates HTTP
2016/08/17 17:20:19| WARNING: use of 'ignore-no-store' in 'refresh_pattern' viol                                                     ates HTTP
2016/08/17 17:20:19| WARNING: use of 'ignore-private' in 'refresh_pattern' viola                                                     tes HTTP
2016/08/17 17:20:19| WARNING: HTTP requires the use of Via

Y AQUI ADJUNTO LAS CAPTURAS DE LA REGLA DE REDIRECCION, LO HAGO CON MIKROTIK



#3
Squid 2.7 & Squid 3.x / Re:Problema con Squid3
Agosto 17, 2016, 03:03:12 PM
firecold, muchas gracias con responder, aquí adjunto las últimas lineas de los log's correspondientes ya que son demasiado largos pára adjuntarlos completos y el conf de mi squid.


ESTE ES EL cache.log

2016/08/16 18:05:10| errorpage.cc(293) errorTryLoadText: '/usr/share/squid3/errors/es-us/ERR_CONNECT_FAIL': (2) No such file or directory
2016/08/16 18:05:10| WARNING: Error Pages Missing Language: es-us
2016/08/16 18:05:30| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 129: (92) Protocol not available
2016/08/16 18:05:30| errorpage.cc(293) errorTryLoadText: '/usr/share/squid3/errors/es-us/ERR_ZERO_SIZE_OBJECT': (2) No such file or directory
2016/08/16 18:05:30| WARNING: Error Pages Missing Language: es-us
2016/08/16 18:05:30| errorpage.cc(293) errorTryLoadText: '/usr/share/squid3/errors/es-us/ERR_ZERO_SIZE_OBJECT': (2) No such file or directory
2016/08/16 18:05:30| WARNING: Error Pages Missing Language: es-us
2016/08/16 18:05:30| errorpage.cc(293) errorTryLoadText: '/usr/share/squid3/errors/es-us/ERR_ZERO_SIZE_OBJECT': (2) No such file or directory
2016/08/16 18:05:30| WARNING: Error Pages Missing Language: es-us
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 17: (92) Protocol not available
2016/08/16 18:05:31| errorpage.cc(293) errorTryLoadText: '/usr/share/squid3/errors/es-us/ERR_DNS_FAIL': (2) No such file or directory
2016/08/16 18:05:31| WARNING: Error Pages Missing Language: es-us
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 12: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 14: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 18: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 19: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 20: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 21: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 23: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 24: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 26: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 28: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 30: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 31: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 32: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 33: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 34: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 35: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 36: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 38: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 39: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 40: (92) Protocol not available
2016/08/16 18:05:31| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 41: (92) Protocol not available
2016/08/16 18:05:49| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 18: (92) Protocol not available
2016/08/16 18:05:49| IpIntercept.cc(137) NetfilterInterception:  NF getsockopt(SO_ORIGINAL_DST) failed on FD 17: (92) Protocol not available
2016/08/17 16:11:29.268| WARNING: Closing client 10.4.4.60:61214 connection due to lifetime timeout
2016/08/17 16:11:29.268|        http://ssw.live.com/UploadData.aspx
2016/08/17 16:14:18.436| WARNING: Closing client 10.4.4.60:61344 connection due to lifetime timeout
2016/08/17 16:14:18.436|        http://ssw.live.com/UploadData.aspx
2016/08/17 16:14:50.573| WARNING: Closing client 10.4.4.60:61364 connection due to lifetime timeout
2016/08/17 16:14:50.573|        http://ssw.live.com/UploadData.aspx
2016/08/17 16:17:30.243| WARNING: Closing client 10.4.4.60:61516 connection due to lifetime timeout
2016/08/17 16:17:30.243|        http://ssw.live.com/UploadData.aspx



ESTE ES EL access.log (he cambiado las ip's origen por 10.10.10.10)


1471382513.438 2029675 10.10.10.10 TCP_MISS/206 585800 GET http://officecdn.microsoft.com.edgesuite.net/pr/39168D7E-077B-48E7-872C-B232C3E72675/Office/Data/15.0.4849.1003/i643082.cab - DIRECT/200.61.25.104 application/octet-stream
1471382534.430 1888807 10.10.10.10 TCP_MISS/206 4717 GET http://au.v4.download.windowsupdate.com/c/msdownload/update/software/secu/2016/07/word-x-none_2ff747d6e1281835daeb1aaebe60448d66de8980.cab - DIRECT/13.107.4.50 application/vnd.ms-cab-compressed
1471382535.966 1054197 10.10.10.10 TCP_MISS/200 8232 GET http://gom-player.softonic.com/descargar - DIRECT/46.28.209.1 text/html
1471382880.030 3291007 10.10.10.10 TCP_MISS/206 729556 GET http://igcdn-videos-e-9-a.akamaihd.net/hphotos-ak-xft1/t50.9793-16/13194697_1825722750998169_1232326571_s.mp4 - DIRECT/200.61.25.112 video/mp4
1471382896.926 3311530 10.10.10.10 TCP_MISS/206 732582 GET http://igcdn-videos-f-2-a.akamaihd.net/hphotos-ak-xfp1/t50.9793-16/13190807_1762446943972262_2045227717_n.mp4 - DIRECT/200.61.25.112 video/mp4
1471382908.190 3325069 10.10.10.10 TCP_MISS/206 745544 GET http://igcdn-videos-f-2-a.akamaihd.net/hphotos-ak-xfp1/t50.9793-16/13190807_1762446943972262_2045227717_n.mp4 - DIRECT/200.61.25.112 video/mp4
1471382917.918 6033106 10.10.10.10 TCP_MISS/206 589160 GET http://190.55.60.137/? - DIRECT/190.55.60.137 application/octet-stream
1471382931.742 3343280 10.10.10.10 TCP_MISS/206 737747 GET http://igcdn-videos-e-19-a.akamaihd.net/hphotos-ak-xft1/t50.9793-16/12854257_1653754811604739_216124324_s.mp4 - DIRECT/200.61.25.107 video/mp4
1471382934.302 3353647 10.10.10.10 TCP_MISS/206 743672 GET http://igcdn-videos-e-19-a.akamaihd.net/hphotos-ak-xft1/t50.9793-16/12854257_1653754811604739_216124324_s.mp4 - DIRECT/200.61.25.107 video/mp4
1471382937.886 3352036 10.10.10.10 TCP_MISS/206 723190 GET http://igcdn-videos-e-9-a.akamaihd.net/hphotos-ak-xft1/t50.9793-16/13194697_1825722750998169_1232326571_s.mp4 - DIRECT/200.61.25.112 video/mp4
1471382940.958 3353045 10.10.10.10 TCP_MISS/206 725545 GET http://scontent-gru2-1.cdninstagram.com/t50.9793-16/13726507_1775581409347248_518508998_s.mp4 - DIRECT/31.13.85.52 video/mp4
1471382969.118 3386786 10.10.10.10 TCP_MISS/206 756121 GET http://scontent-gru2-1.cdninstagram.com/t50.9793-16/13726507_1775581409347248_518508998_s.mp4 - DIRECT/31.13.85.52 video/mp4
1471382977.822 3392903 10.10.10.10 TCP_MISS/206 729445 GET http://scontent-gru2-1.cdninstagram.com/t50.9793-16/13726507_1775581409347248_518508998_s.mp4 - DIRECT/31.13.85.52 video/mp4
1471382978.334 3397012 10.10.10.10 TCP_MISS/206 749640 GET http://igcdn-videos-e-9-a.akamaihd.net/hphotos-ak-xft1/t50.9793-16/13194697_1825722750998169_1232326571_s.mp4 - DIRECT/200.61.25.112 video/mp4
1471382980.406 6097671 10.10.10.10 TCP_MISS/206 29757056 GET http://190.55.60.137/? - DIRECT/190.55.60.137 application/octet-stream
1471461089.294 86400386 10.10.10.10 TCP_MISS/000 0 POST http://ssw.live.com/UploadData.aspx - DIRECT/134.170.111.154 -
1471461258.436 86401144 10.10.10.10 TCP_MISS/000 0 POST http://ssw.live.com/UploadData.aspx - DIRECT/134.170.111.154 -
1471461290.573 86401350 10.10.10.10 TCP_MISS/000 0 POST http://ssw.live.com/UploadData.aspx - DIRECT/134.170.111.154 -
1471461450.303 86401077 10.10.10.10 TCP_MISS/000 0 POST http://ssw.live.com/UploadData.aspx - DIRECT/134.170.104.154 -
1471462805.966 86400156 10.10.10.10 TCP_MISS/000 0 POST http://up.br.bav.baidu.com/cgi-bin/statistic_cloud_hits.cgi? - DIRECT/200.229.203.81 -
1471462988.159 86400716 10.10.10.10 TCP_MISS/000 0 POST http://pasta.ds.duapps.com/api/data? - DIRECT/112.80.248.60 -
1471463260.855 86401008 10.10.10.10 TCP_MISS/000 0 POST http://up.br.bav.baidu.com/up.cgi - DIRECT/200.229.203.81 -



AQUI VA MI squid.conf

acl localhost src 127.0.0.1/32 ::1
acl user src all
acl SSL_ports port 443
acl Safe_ports port 80      # http
acl Safe_ports port 21      # ftp
acl Safe_ports port 443      # https
acl Safe_ports port 70      # gopher
acl Safe_ports port 210      # wais
acl Safe_ports port 1025-65535   # unregistered ports
acl Safe_ports port 280      # http-mgmt
acl Safe_ports port 488      # gss-http
acl Safe_ports port 591      # filemaker
acl Safe_ports port 777      # multiling http
acl CONNECT method CONNECT
acl bogon src 192.168.0.0/16
acl bogon src 172.16.0.0/12
acl bogon src 10.0.0.0/8
######
http_access allow user
http_access allow localhost
http_access deny all
######
http_port 3128 intercept ignore-cc
http_port 80 intercept
######
cache_replacement_policy heap LFUDA
cache_swap_low 90
cache_swap_high 95
cache_dir aufs /var/spool/squid3 409600 16 256
cache_mem 4096 MB
maximum_object_size_in_memory 512 KB
minimum_object_size 0 KB
maximum_object_size 50 MB
#######
logfile_rotate 10
memory_pools off
quick_abort_min 0 KB
quick_abort_max 0 KB
log_icp_queries off
client_db off
buffered_logs on
half_closed_clients off
shutdown_lifetime 5 seconds
via off
#######
reply_header_max_size 200 KB
request_header_max_size 200 KB
#reply_body_max_size 0
#request_body_max_size 0
######

forwarded_for deleted

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.(gif|png|jpg|jpeg|ico)$ 10080 90% 43200 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(iso|avi|wav|mp3|mp4|mpeg|swf|flv|x-flv)$ 43200 90% 432000 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.(deb|rpm|exe|zip|tar|tgz|ram|rar|bin|ppt|doc|tiff)$ 10080 90% 43200 override-expire ignore-no-cache ignore-no-store ignore-private
refresh_pattern -i \.index.(html|htm)$ 0 40% 10080
refresh_pattern -i \.(html|htm|css|js)$ 1440 40% 40320
#
refresh_pattern -i youtube.com/.* 10080 90% 43200
#
refresh_pattern -i microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
refresh_pattern -i windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
refresh_pattern -i windows.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 43200 reload-into-ims
#
refresh_pattern . 0 40% 40320
######
cache_effective_user user
#4
Squid 2.7 & Squid 3.x / Problema con Squid3
Agosto 16, 2016, 02:07:09 PM
Buenas amigos de la comunidad, les comento mas o menos que problema tengo, he puesto a funcionar un squid 3.1.20 como web cache, la cosa es que cuando le redirijo todo el tráfico de mi red (unos 200 MB más o menos) comienza funcionando espectacular, luego de unas horas el trafico al squid3 comienza a disminuir volviendo lenta la navegación y las descargas, tengo que desactivar la redirección de tráfico al squid, reiniciar el servicio y redigir todo de nuevo. La cosa es que al cabo de unas horas vuelve a pasar lo mismo, con la diferencia de que cada vez es menor el tiempo entre que funciona y se pone lento. ¿Alguna idea de que puede llegar a ser?

Desde ya muchas gracias y saludos!!!