<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Rafael,<br>
<br>
Vc está tentando colocar o proxy em modo bridge ou como gateway da
rede? Ele está fazendo cache mesmo ou só está passando pelo squid
enquanto está rodando?<br>
<br>
<div class="moz-signature">
<meta http-equiv="CONTENT-TYPE" content="text/html; ">
<title></title>
<font style="font-size: 8pt;" color="#000080"
face="Bitstream Vera Sans, sans-serif" size="2"><b>José
Oliveira de Almeida Filho</b></font><br>
<font style="font-size: 8pt;" color="#666666"
face="Bitstream Vera Sans, sans-serif" size="2">Analista
de Redes</font><br>
<font style="font-size: 8pt;" color="#666666"
face="Bitstream Vera Sans, sans-serif" size="2">SERPRO/SUPRE/REPRO/RERCE</font><br>
<font face="Bitstream Vera Sans, sans-serif"><font
style="font-size: 8pt;" size="2"><font color="#ff9900"><b>(</b></font><b>
</b><font color="#000080">+55 0XX 81 2126 4016</font></font></font><br>
<font face="Bitstream Vera Sans, sans-serif"><font
style="font-size: 8pt;" size="2"><font color="#ff9900"><b>*</b></font>
<font color="#000080"><u><a class="moz-txt-link-abbreviated" href="mailto:jose.almeida-filho@serpro.gov.br">jose.almeida-filho@serpro.gov.br</a></u></font></font></font>
</div>
<br>
<br>
Rafael Moraes escreveu:
<blockquote
cite="mid:5344ee8d0909151413s2af97789l229dac904bcf094a@mail.gmail.com"
type="cite">Hello everyone,<br>
<br>
I'm using Patch cttproxy-2.6.18-2.0.6 + Squid 2.6-5 + Iptables 3.6.0 +
Kernel 2.6.18-6. + Thundercache 2.1<br>
<br>
I've based my experience on <a moz-do-not-send="true"
href="http://web.suffieldacademy.org/ils/netadmin/docs/software/squid/#toc11">http://web.suffieldacademy.org/ils/netadmin/docs/software/squid/#toc11</a><br>
<br>
The whole thing is working very well, I can cache videos from youtube
and most of the video websites. The clients do everything on the
internet with their own IP adresses.<br>
BUT, my squid cache is not working properly. It caches everything but
when we try to use the cache it doesn't work.<br>
<br>
Please, check my squid.conf:<br>
<br>
<i>http_port 3128 tproxy transparent<br>
visible_hostname proxy<br>
<br>
cache_mem 20 MB<br>
maximum_object_size_in_memory 5 MB<br>
maximum_object_size 600 MB<br>
minimum_object_size 0 KB<br>
cache_swap_low 90<br>
cache_swap_high 95<br>
cache_dir ufs /cache01/squid 2048 16 256<br>
cache_access_log /var/log/squid/access.log<br>
refresh_pattern ^ftp: 15 20% 2280<br>
refresh_pattern ^gopher: 15 0% 2280<br>
refresh_pattern . 15 20% 2280<br>
<br>
acl all src <a moz-do-not-send="true" href="http://0.0.0.0/0.0.0.0">0.0.0.0/0.0.0.0</a><br>
acl manager proto cache_object<br>
acl localhost src <a moz-do-not-send="true"
href="http://127.0.0.1/255.255.255.255">127.0.0.1/255.255.255.255</a><br>
acl SSL_ports port 443 563<br>
acl Safe_ports port 21 80 443 563 70 210 280 488 59 777 901 1025-65535<br>
acl purge method PURGE<br>
acl CONNECT method CONNECT<br>
<br>
http_access allow manager localhost<br>
http_access deny manager<br>
http_access allow purge localhost<br>
http_access deny purge<br>
http_access deny !Safe_ports<br>
http_access deny CONNECT !SSL_ports<br>
<br>
acl redelocal src xxx.xxx.xxx..0/24<br>
acl externo src xxx.xxx.xxx.xxx<br>
http_access allow externo<br>
http_access allow localhost<br>
http_access allow redelocal<br>
http_access deny all<br>
acl local1 src xxx.xxx.xxx.0/24<br>
<br>
tcp_outgoing_address ip_squid local1<br>
<br>
<br>
url_rewrite_children 200<br>
acl store_rewrite_list url_regex -i "/etc/squid/thunder.lst"<br>
url_rewrite_access allow store_rewrite_list<br>
url_rewrite_access deny all<br>
url_rewrite_program /etc/squid/loader.php<br>
<br>
<br>
#url_rewrite_access allow store_rewrite_list<br>
#url_rewrite_access deny all<br>
#url_rewrite_program /etc/squid/loader.php<br>
<br>
#nega cache local, para não haver duplicação<br>
acl localcache dstdomain ip_squid<br>
cache deny localcache<br>
<br>
#Bloquear ICP e HTCP - Usado para conversar com outros caches
Hierarquicamente<br>
icp_port 0<br>
htcp_port 0<br>
icp_access deny all<br>
htcp_access deny all<br>
#Desabilitar SNMP<br>
snmp_port 0<br>
snmp_access deny all<br>
<br>
cache_effective_user proxy<br>
cache_effective_group proxy<br>
<br>
#Extras<br>
detect_broken_pconn on<br>
<br>
<br>
pipeline_prefetch on<br>
~ </i><br>
<br>
--------------------------------------------------------------------------------------------------------------------------------<br>
<br>
Iptables Rule:<br>
<br>
iptables -t tproxy -A PREROUTING -p tcp -m tcp --dport 80 -j TPROXY
--on-port 3128<br>
<pre>
</pre>
<br>
<br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
tproxy mailing list
<a class="moz-txt-link-abbreviated" href="mailto:tproxy@lists.balabit.hu">tproxy@lists.balabit.hu</a>
<a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/tproxy">https://lists.balabit.hu/mailman/listinfo/tproxy</a>
</pre>
</blockquote>
</body>
</html>
<table><tr><td bgcolor=#ffffff><font color=#000000><pre>"Esta mensagem do SERVIÇO FEDERAL DE PROCESSAMENTO DE DADOS (SERPRO), empresa pública federal regida pelo disposto na Lei Federal nº 5.615, é enviada exclusivamente a seu destinatário e pode conter informações confidenciais, protegidas por sigilo profissional. Sua utilização desautorizada é ilegal e sujeita o infrator às penas da lei. Se você a recebeu indevidamente, queira, por gentileza, reenviá-la ao emitente, esclarecendo o equívoco."
"This message from SERVIÇO FEDERAL DE PROCESSAMENTO DE DADOS (SERPRO) -- a government company established under Brazilian law (5.615/70) -- is directed exclusively to its addressee and may contain confidential data, protected under professional secrecy rules. Its unauthorized use is illegal and may subject the transgressor to the law's penalties. If you're not the addressee, please send it back, elucidating the failure."</pre></font></td></tr></table>