ThEcHaCaL wrote: > jmhenrique wrote: > >> --- Em [email protected], ThEcHaCaL <[EMAIL PROTECTED]> escreveu >> >> >>> henrique wrote: >>> >>> >>>> (...) >>>> >>>> >>>> >>>> >>>>>>>> acho que deve ser alguma coisa no squid.conf , se alguém já passou >>>>>>>> por >>>>>>>> isso ou se alguém usa essa dupla e poder me ajudar fico >>>>>>>> >>>>>>>> >>>>>>>> >>>> agradecido. >>>> >>>> >>>> >>>>>>>> Valeu >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> Olá, >>>>>>> vc apenas postou os logs do squid. Poste os logs do squidguard >>>>>>> >>>>>>> >>>>>>> >>>> tambem. >>>> >>>> >>>> >>>>>>> [ ]s, Henry. >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>> só por curiosidade, vc postou o seu squidGuard.conf inteiro, ou >>>>> >>>>> >>>>> >>>> somente uma >>>> >>>> >>>> >>>>> parte ? >>>>> (digo isto porque estão faltando as classes "dest" de cada destino. ) >>>>> >>>>> p.s.: a proposito, nao faça top-post, responda abaixo desta >>>>> >>>>> >>>>> >>>> mensagem... fica >>>> >>>> >>>> >>>>> mais legivel para quem for ler a mensagem >>>>> >>>>> [ ]s, Henry >>>>> >>>>> >>>>> >>>>> >>>>> >>>> >>>> >>>> >>>>> Coloquei somente uma parte do squidGuard.conf, as dest estão >>>>> funcionando direitinho, mas como falei, se eu setar a opcão time >>>>> >>>>> >> da o >> >> >>>>> erro e o squid é killado. >>>>> >>>>> >>>>> >>>> >>>> >>>> >>>>> ThEcHaCaL >>>>> thechacal.net >>>>> >>>>> >>>>> >>>> Olá. Se o seu squid está sendo kilado, eh porque existe algum erro no >>>> seu helper. E portanto, eh um problema do squidguard e não do squid. >>>> >>>> faça o teste sugerido pela propria aplicação, como root, digite em um >>>> terminal: >>>> >>>> echo "http://www.example.com 10.0.0.1/ - - GET" | squidGuard -c >>>> /etc/squid/squidGuard.conf -d >>>> >>>> (respeitando a sua classe de ips liberados ou bloqueados, algum site >>>> especifico que vc tenha em alguma black - ou white - list, e >>>> principalmente, a localização do seu arquivo de configuração do >>>> squidguard) >>>> >>>> e vá debugando as mensagens de erro. Pelo menos no meu, ele não mostra >>>> todos os erros de uma vez só, a medida que vc vá consertando os erros >>>> mostrados, ele vai informando os novos. >>>> E posso apostar grande quantia que o problema são os seus "*". >>>> Experimente colocar as opçoes literais para dias da semana. Parece >>>> >>>> >> meio >> >> >>>> "lusitano", mas aqui eh assim que eu as tenho. >>>> (se for somente este o problema). >>>> >>>> [ ]s, e divirta-se >>>> Henry. >>>> >>>> >> >> >>> Vamos lá, vou colar a saída do echo: >>> >>> trinity:/var/log/squid/squidGuard/logs# echo "http://finddestiny.com/ >>> 10.0.0.1/ - - GET" | squidGuard -c /etc/squid/squidGuard.conf -d >>> 2007-11-20 07:59:42 [3138] init iplist /etc/squid/diretoria.txt >>> 2007-11-20 07:59:42 [3138] init domainlist >>> /var/log/squid/squidGuard/db/blacklists/ads/domains >>> 2007-11-20 07:59:42 [3138] loading dbfile >>> /var/log/squid/squidGuard/db/blacklists/ads/domains.db >>> 2007-11-20 07:59:42 [3138] init urllist >>> /var/log/squid/squidGuard/db/blacklists/ads/urls >>> 2007-11-20 07:59:42 [3138] loading dbfile >>> /var/log/squid/squidGuard/db/blacklists/ads/urls.db >>> . >>> . >>> . >>> . >>> 2007-11-20 07:59:42 [3138] loading dbfile >>> /var/log/squid/squidGuard/db/blacklists/sect/domains.db >>> 2007-11-20 07:59:42 [3138] init domainlist >>> /var/log/squid/squidGuard/db/blacklists/whitelist/domains >>> 2007-11-20 07:59:42 [3138] loading dbfile >>> /var/log/squid/squidGuard/db/blacklists/whitelist/domains.db >>> 2007-11-20 07:59:42 [3138] init urllist >>> /var/log/squid/squidGuard/db/blacklists/whitelist/urls >>> 2007-11-20 07:59:42 [3138] loading dbfile >>> /var/log/squid/squidGuard/db/blacklists/whitelist/urls.db >>> 2007-11-20 07:59:42 [3138] squidGuard 1.2.0 started (1195556382.173) >>> 2007-11-20 07:59:42 [3138] squidGuard ready for requests >>> >>> >> (1195556382.191) >> >> >>> 2007-11-20 07:59:42 [3138] Request(default/adult/-) >>> http://finddestiny.com/ 10.0.0.1/- - - >>> http://192.168.0.3/deny.html 10.0.0.1/- - - >>> 2007-11-20 07:59:42 [3138] squidGuard stopped (1195556382.191) >>> trinity:/var/log/squid/squidGuard/logs# >>> >>> >>> No meu squidGuard.conf tirei os "*" que você disse ficando da seguinte >>> forma: >>> >>> >>> logdir /var/log/squid/squidGuard/logs >>> dbhome /var/log/squid/squidGuard/db/blacklists >>> >>> src diretoria { >>> iplist /etc/squid/diretoria.txt >>> } >>> >>> dest ads{ >>> domainlist ads/domains >>> urllist ads/urls >>> log /var/log/squid/squidGuard/logs/squidguard-access.log >>> } >>> >>> dest adult{ >>> domainlist adult/domains >>> urllist adult/urls >>> log /var/log/squid/squidGuard/logs/squidguard-access.log >>> } >>> . >>> . >>> . >>> . >>> dest whitelist{ >>> domainlist whitelist/domains >>> urllist whitelist/urls >>> log /var/log/squid/squidGuard/logs/squidguard-access.log >>> } >>> >>> time afterwork { >>> weekly Tuesdays 12:00 - 14:00 >>> } >>> >>> acl { >>> diretoria { >>> pass !in-addr whitelist !adult !antispyware !sexuality >>> !virusinfected !hacking !phishing !porn !proxy !spyware all >>> } >>> default within afterwork { >>> pass !in-addr whitelist !adult !antispyware !sexuality >>> !virusinfected !hacking !phishing !porn !proxy !spyware all >>> }else{ >>> pass !in-addr whitelist !ads !adult !antispyware >>> !astrology !artnudes !beerliquorinfo !sexuality !games !onlinegames >>> !virusinfected !shopping !culinary !blog !chat !naturism !aggressive >>> !audio-video !drugs !gambling !hacking !mail !phishing !porn !proxy >>> !spyware !violence !warez !guns !reaffected !entertainment !cleaning >>> !banking !socialnetworking !onlineauctions !kidstimewasting !ecommerce >>> !radio !government !childcare !news !jobsearch !gardening !verisign >>> !jewelry !dialers !cellphones !instantmessaging !mobile-phone >>> !marketingware !filehosting !clothing !religion !onlinepayment >>> !searchengines !ringtones !desktopsillies !vacation !sports >>> !personalfinance !updatesites !mixed_adult !dating !weapons >>> !beerliquorsale !financial !homerepair !medical !weather >>> !frencheducation !hygiene !pets !webmail !sect all >>> redirect http://192.168.0.3/deny.html >>> } >>> } >>> >>> trinity:/var/log/squid# /etc/init.d/squid restart >>> Restarting Squid HTTP proxy: squid Waiting.....................done. >>> . >>> trinity:/var/log/squid# >>> >>> trinity:/var/log/squid# cat /var/log/squid/cache.log >>> >>> 2007/11/20 08:36:17| Starting Squid Cache version 2.6.STABLE5 for >>> i386-debian-linux-gnu... >>> 2007/11/20 08:36:17| Process ID 5649 >>> 2007/11/20 08:36:17| With 1024 file descriptors available >>> 2007/11/20 08:36:17| Using epoll for the IO loop >>> 2007/11/20 08:36:17| DNS Socket created at 0.0.0.0, port 48352, FD 6 >>> 2007/11/20 08:36:17| Adding domain cabonatal.com.br from >>> >>> >> /etc/resolv.conf >> >> >>> 2007/11/20 08:36:17| Adding nameserver 201.76.155.68 from >>> >>> >> /etc/resolv.conf >> >> >>> 2007/11/20 08:36:17| helperOpenServers: Starting 5 'squidGuard' >>> >>> >> processes >> >> >>> 2007/11/20 08:36:17| User-Agent logging is disabled. >>> 2007/11/20 08:36:17| Referer logging is disabled. >>> 2007/11/20 08:36:17| Unlinkd pipe opened on FD 16 >>> 2007/11/20 08:36:17| Swap maxSize 102400 KB, estimated 7876 objects >>> 2007/11/20 08:36:17| Target number of buckets: 393 >>> 2007/11/20 08:36:17| Using 8192 Store buckets >>> 2007/11/20 08:36:17| Max Mem size: 8192 KB >>> 2007/11/20 08:36:17| Max Swap size: 102400 KB >>> 2007/11/20 08:36:17| Local cache digest enabled; rebuild/rewrite every >>> 3600/3600 sec >>> 2007/11/20 08:36:17| Rebuilding storage in /var/spool/squid (DIRTY) >>> 2007/11/20 08:36:17| Using Least Load store dir selection >>> 2007/11/20 08:36:17| Set Current Directory to /var/spool/squid >>> 2007/11/20 08:36:17| Loaded Icons. >>> 2007/11/20 08:36:17| Accepting transparently proxied HTTP connections at >>> 0.0.0.0, port 3128, FD 18. >>> 2007/11/20 08:36:17| Accepting ICP messages at 0.0.0.0, port 3130, >>> >>> >> FD 19. >> >> >>> 2007/11/20 08:36:17| HTCP Disabled. >>> 2007/11/20 08:36:17| WCCP Disabled. >>> 2007/11/20 08:36:17| Ready to serve requests. >>> 2007/11/20 08:36:17| WARNING: url_rewriter #3 (FD 9) exited >>> 2007/11/20 08:36:17| WARNING: url_rewriter #1 (FD 7) exited >>> 2007/11/20 08:36:17| WARNING: url_rewriter #2 (FD 8) exited >>> 2007/11/20 08:36:17| Too few url_rewriter processes are running >>> FATAL: The url_rewriter helpers are crashing too rapidly, need help! >>> >>> Squid Cache (Version 2.6.STABLE5): Terminated abnormally. >>> CPU Usage: 0.028 seconds = 0.016 user + 0.012 sys >>> Maximum Resident Size: 0 KB >>> Page faults with physical i/o: 0 >>> Memory usage for squid via mallinfo(): >>> total space in arena: 2640 KB >>> Ordinary blocks: 2569 KB 2 blks >>> Small blocks: 0 KB 0 blks >>> Holding blocks: 240 KB 1 blks >>> Free Small blocks: 0 KB >>> Free Ordinary blocks: 70 KB >>> Total in use: 2809 KB 98% >>> Total free: 70 KB 2% >>> >>> >>> Squid killado....... >>> >>> >>> Valeu >>> >>> >>> >> Bem, eu tentei fazer com o nome do dia, igual vc fez, e deu erro >> tambem. Eu sempre uso aqui a inicial do nome do dia em ingles(salvo >> umas exceções). >> ou seja, para setar a semana toda - seg a sex, eu utilizo: >> >> weekly mtwhf 00:00 - 23:59 >> >> >> >> a unica coisa estranha de vc ter feito os testes e não ter dado nenhum >> erro, eu digo porque olhe so a saida do meu comando com um asterisco >> para a semana toda, por ex: >> >> tulipa:/var/lib/squidguard/db/adult# echo "http://zzzsex.com 10.0.0.1/ >> - - GET" | squidGuard -c /etc/squid/squidGuard.conf -d >> 2007-11-20 10:56:23 [24569] init iplist /etc/squid/diretoria.txt >> 2007-11-20 10:56:23 [24569] syntax error in configfile >> /etc/squid/squidGuard.conf line 12 >> >> Eis a linha 12: >> >> weekly * 17:00 - 19:00 >> >> dai eu a troco para >> >> weekly mtwhfa 17:00 - 19:00 >> >> e olhe o resultado, ele chama a pagina de http://localhost/deny.html. >> >> tulipa:/var/lib/squidguard/db/adult# echo "http://zzzsex.com 10.0.0.1/ >> - - GET" | squidGuard -c /etc/squid/squidGuard.conf -d >> 2007-11-20 10:57:37 [24596] init iplist /etc/squid/diretoria.txt >> 2007-11-20 10:57:37 [24596] init domainlist >> /var/lib/squidguard/db/adult/domains >> 2007-11-20 10:57:37 [24596] loading dbfile >> /var/lib/squidguard/db/adult/domains.db >> 2007-11-20 10:57:37 [24596] init urllist /var/lib/squidguard/db/adult/urls >> 2007-11-20 10:57:37 [24596] loading dbfile >> /var/lib/squidguard/db/adult/urls.db >> 2007-11-20 10:57:37 [24596] init domainlist >> /var/lib/squidguard/db/branco/domains >> 2007-11-20 10:57:37 [24596] loading dbfile >> /var/lib/squidguard/db/branco/domains.db >> 2007-11-20 10:57:37 [24596] init urllist >> /var/lib/squidguard/db/branco/urls >> 2007-11-20 10:57:37 [24596] loading dbfile >> /var/lib/squidguard/db/branco/urls.db >> 2007-11-20 10:57:37 [24596] squidGuard 1.2.0 started (1195563457.693) >> 2007-11-20 10:57:37 [24596] recalculating alarm in 3743 seconds >> 2007-11-20 10:57:37 [24596] squidGuard ready for requests (1195563457.696) >> http://localhost/deny.html 10.0.0.1/- - - >> >> >> Daí,alterei a minha linha 12 para igual a sua, >> >> weekly Tuesdays 12:00 - 14:00 >> >> e olhe o erro que encontrei: >> >> >> tulipa:/var/lib/squidguard/db/adult# echo "http://zzzsex.com 10.0.0.1/ >> - - GET" | squidGuard -c /etc/squid/squidGuard.conf -d >> 2007-11-20 11:00:08 [24651] init iplist /etc/squid/diretoria.txt >> 2007-11-20 11:00:08 [24651] squidGuard: weekday formaterror in >> /etc/squid/squidGuard.conf line 12 >> >> >> Colocando um Tuesdays em minusculas, obtenho (veja que o erro mudou): >> >> >> tulipa:/var/lib/squidguard/db/adult# echo "http://zzzsex.com 10.0.0.1/ >> - - GET" | squidGuard -c /etc/squid/squidGuard.conf -d >> 2007-11-20 11:00:49 [24663] init iplist /etc/squid/diretoria.txt >> 2007-11-20 11:00:49 [24663] syntax error in configfile >> /etc/squid/squidGuard.conf line 12 >> >> >> colocando tuesday, obtenho: >> >> tulipa:/var/lib/squidguard/db/adult# echo "http://zzzsex.com 10.0.0.1/ >> - - GET" | squidGuard -c /etc/squid/squidGuard.conf -d >> 2007-11-20 11:02:16 [24690] init iplist /etc/squid/diretoria.txt >> 2007-11-20 11:02:16 [24690] syntax error in configfile >> /etc/squid/squidGuard.conf line 12 >> >> >> colocando tue, obtenho: >> >> tulipa:/var/lib/squidguard/db/adult# echo "http://zzzsex.com 10.0.0.1/ >> - - GET" | squidGuard -c /etc/squid/squidGuard.conf -d >> 2007-11-20 11:03:46 [24726] init iplist /etc/squid/diretoria.txt >> 2007-11-20 11:03:46 [24726] syntax error in configfile >> /etc/squid/squidGuard.conf line 12 >> >> mas colocando apenas t, obtenho o resultado correto e esperado(isto >> apenas para terça-feira, para os outros dias da semana são as letras >> correspondentes.) >> >> >> >> Bem, vc não disse - ou pelo menos eu não me lembro de vc ter dito - a >> sua versão do squidguard, nem do squid, nem do seu SO. >> Eu particularmente agora estou em um debian sid, com squid Version >> 2.6.STABLE16 e squidguard SquidGuard: 1.2.0 Sleepycat Software: >> Berkeley DB 4.3.29: (September 6, 2005). >> >> Não compilei, apenas instalei a que vem na distribuiçao. >> >> [ ]s, Henry >> >> >> >> >> Enviar mensagem: [email protected] >> Assinar: [EMAIL PROTECTED] >> Cancelar assinatura: [EMAIL PROTECTED] >> Proprietário da lista: [EMAIL PROTECTED] >> >> >> >> Links do Yahoo! Grupos >> >> >> >> >> > > Cara, que coisa estranha, botei o weekly mtwhf 12:00 - 14:00 e o erro > sumiu, mas ele não ná liberando no horário que eu botei, a conf tá assim: > > time afterwork { > weekly mtwhf 12:00 - 14:00 > } > > acl { > diretoria { > pass all > } > default within afterwork { > pass all > }else{ > pass !in-addr whitelist !ads !adult !antispyware > !astrology !artnudes !beerliquorinfo !sexuality !games !onlinegames > !virusinfected !shopping !culinary !blog !chat > !naturism !aggressive !audio-video !drugs !gambling !hacking !mail > !phishing !porn !proxy !spyware !violence !warez !guns > !reaffected !entertainment !cleaning !banking !socialnetworking > !onlineauctions !kidstimewasting !ecommerce !radio !government > !childcare !news !jobsearch !gardening !verisign > !jewelry !dialers !cellphones !instantmessaging !mobile-phone > !marketingware !filehosting !clothing !religion > !onlinepayment !searchengines !ringtones !desktopsillies !vacation > !sports !personalfinance !updatesites !mixed_adult !dating !weapons > !beerliquorsale !financial !homerepair !medical !weather > !frencheducation !hygiene !pets !webmail !sect all > > redirect http://192.168.0.3/deny.html > } > } > > > 2007-11-20 13:10:52 [29020] loading dbfile > /var/log/squid/squidGuard/db/blacklists/whitelist/urls.db > 2007-11-20 13:10:52 [29020] squidGuard 1.2.0 started (1195575052.000) > 2007-11-20 13:10:52 [29020] recalculating alarm in 2948 seconds > 2007-11-20 13:10:52 [29020] squidGuard ready for requests (1195575052.019) > 2007-11-20 13:10:52 [29020] Request(default/adult/-) > http://finddestiny.com/ 10.0.0.1/- - - > http://192.168.0.3/deny.html 10.0.0.1/- - - > 2007-11-20 13:10:52 [29020] squidGuard stopped (1195575052.019) > > > Quando dou o echo numa página bloqueada, ele redireciona pra deny.html, > não era pra liberar já que está dentro do horário livre? > > > Valeu fera. > > > Enviar mensagem: [email protected] > Assinar: [EMAIL PROTECTED] > Cancelar assinatura: [EMAIL PROTECTED] > Proprietário da lista: [EMAIL PROTECTED] > > > > Links do Yahoo! Grupos > > > >
Consegui filtrar do jeito que eu queria, obrigado pelas dicas henrique. [ ] 's ThEcHaCaL
