Boa noite a todos, o meu squid estava funcionando blz, até que como estava como os logs e caches,muito grande resolvi apagar tudo e refazer o cache (squid -z), agora depois disso esta aparecendo esse erro ((107) Transport endpoint is not connected), o que pode ser. e segue abaixo o meu squid.conf
# squid.conf personalizado e em teste - By Lavinas Versao 2.00 - Ultima Atualizacao 28/10/2008. # Todos Direitos reservados ao seu autor, ou para quem for cedido... # Squid.conf - Skyline Redes e Servicos de Informatica. # Departamento de Informatica. ################################################## # Padrao Esta e a porta tcp onde o squid ficara ativo. # O padrao e a porta 3128. Escuta Dansguardian ################################################## http_port 3128 transparent icp_port 3130 #http_port 127.0.0.1:3128 ################################################## # Hosts Maquinas ################################################## hosts_file /etc/hosts ################################################## # Padrao. ################################################## hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? no_cache allow QUERY ################################################## # Apache ################################################## acl apache rep_header Server ^Apache broken_vary_encoding allow apache ################################################## # Qntidade de Memoria RAM o squid pode consumir. ################################################## cache_mem 256 MB ################################################## # Padrao - Tags da secao Cache size. # Tamanho maximo de objeto na memoria maior que isso # Sera automaticamento armazenado no hd. ################################################## maximum_object_size_in_memory 128 KB ################################################## # Padrao Tamanho maximo e minimo para arquivos serem armazenados no cache # Isto e especialmente e util para quem precisa baixar muitos arquivos # atraves do apt-get ou Windows update em muitos micros da rede. ################################################## maximum_object_size 256 MB minimum_object_size 0 KB ################################################## # Padrao Qntidade minima para parar substituicao de um objeto no arquivo SWAP. # cache esta 90% cheio. ################################################## cache_swap_low 90 ################################################## # Padrao Qntidade maxima para substituicao de um objeto no arquivo SWAP. # cache esta 90% cheio. ################################################## cache_swap_high 95 ################################################# # Padrao Tamanho minimo de um objeto no Cache - 0 significa que tudo ficara no Cache. ################################################## minimum_object_size 8 KB maximum_object_size_in_memory 128 KB ################################################## # Padrao Politica LRU = Mantem em cache objetos + recentes comeca a remover os + antigos. ################################################## cache_replacement_policy lru memory_replacement_policy lru ################################################## # Cache em disco # (/var/spool/squid/local onde sera salvo) Tam. do cache / Qntidade de Pastas / Qntidade de SubPastas. ################################################## cache_dir ufs /var/spool/squid/cache 30720 64 256 ################################################## # Arquivo onde são guardados os logs de acesso do Squid. ################################################## cache_access_log /var/spool/squid/logs/access.log cache_log /var/spool/squid/logs/cache.log cache_store_log /var/spool/squid/logs/store.log cache_swap_log /var/spool/squid/logs/cache_swap_log pid_filename /var/spool/squid/logs/squid.pid ################################################## # O e-mail que o Squid envia como senha ao acessar um servidor FTP anonimo. ################################################## ftp_user [email protected] ################################################## # DEBUG - Depurador do proxy, responsavel pelos LOGs. ################################################## debug_options ALL, 1 ################################################## # Tratar os "cliente" como qual classe? # Usando "255.255.255.255", os usuarios serao tratados individualmente. ################################################## client_netmask 255.255.255.255 ################################################## # atualizacao do cache. # Estas tras linhas precisam sempre ser usadas em conjunto. Ou seja, # voce pode altera-las, mas sempre as tras precisam estar presentes # no arquivo. Eliminando um, o squid ignora as outras duas e usa o # default. # Os numeros indicam o tempo (em minutos) quando o squid ira verificar # se um atem do cache (uma pagina por exemplo) foi atualizado, para # cada um dos três protocolos. # O primeiro número (o 15) indica que o squid verificará se todas as # páginas e arquivos com mais de 15 minutos foram atualizados. Ele # só verifica checando o tamanho do arquivo, o que é rápido. Se o # arquivo não mudou, então ele continua mandando o que não está # no cache para o cliente. # O terceiro número (o 2280, equivalente a dois dias) indica o tempo # máximo, depois disso o objeto é sempre verificado. ################################################## refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 2280 refresh_pattern . 15 20% 4320 refresh_pattern -i exe$ 0 50% 999999 refresh_pattern -i zip$ 0 50% 999999 refresh_pattern -i tar\.gz$ 0 50% 999999 refresh_pattern -i tgz$ 0 50% 999999 ################################################## # Cadastre os logins usando o comando: # htpasswd /etc/squid/squid_passwd lavinas # abaixo e reinicie o squid com o comando "service squid restart". # Quando os usuários tentarem acessar será aberto uma tela pedindo login. # Autenticacao de Usuarios. # Autenticacao no LDAP - o ip representa o seu servidor ################################################## #auth_param basic program /usr/lib/squid/ldap_auth -v 3 -b "dc=skyline,dc=com,dc=br" -f "uid=%s" -h zeus.monteolimpo.skyline #auth_param basic children 8 #auth_param basic realm Skyline WebProxy - Autenticacao de Usuarios #auth_param basic credentialsttl 20 minutes #acl autenticacao proxy_auth REQUIRED ################################################## #Controle de Tamanho de Upload ################################################## #external_acl_type request_body %{Content-Lenght} /etc/squid/modulos/size.sh #acl request_max_10KB request_body 10240 #act_body_max_size 5 MB #reply_body_max_size 5 MB acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1 #acl to_localhost dst 127.0.0.1/8 acl SSL_ports port 443 #https acl SSL_ports port 563 #snews acl SSL_ports port 873 #rsync acl Safe_ports port 21 # ftp acl Safe_ports port 22 # SSH acl Safe_ports port 25 # SMTP acl Safe_ports port 70 # gopher acl Safe_ports port 80 # http acl Safe_ports port 110 # Pop3 acl Safe_ports port 210 # wais acl Safe_ports port 280 # http-mgmt acl Safe_ports port 443 # https acl Safe_ports port 488 # gss-http acl Safe_ports port 563 # snews acl Safe_ports port 591 # filemaker acl Safe_ports port 631 # cups acl Safe_ports port 777 # multiling http acl Safe_ports port 873 # rsync acl Safe_ports port 901 # SWAT #acl Safe_ports port 1025-1862 # Teste Bloqueio MSN #acl Safe_ports port 1865-65535 # Teste BLoqueio MSN acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 9992 # siope acl purge method PURGE acl CONNECT method CONNECT acl maximo_conexoes maxconn 8 ################################################## # Quem Pode Tudo ################################################## acl tudo_liberado src 192.168.200.40 192.168.200.7 192.168.200.4 192.168.200.3 192.168.200.247 192.168.200.248 192.168.200.249 ################################################## # Restrito ############################################### acl restritos src 192.168.200.20 192.168.200.6 192.168.200.2 192.168.200.1 ################################################## # Lan House ################################################## acl lanhouse src 192.168.200.41 192.168.200.42 192.168.200.43 192.168.200.44 192.168.200.45 192.168.200.46 192.168.200.47 192.168.200.48 192.168.200.49 192.168.200.50 192.168.200.51 192.168.200.52 192.168.200.53 192.168.200.54 192.168.200.55 192.168.200.56 192.168.200.57 192.168.200.58 192.168.200.59 192.168.200.60 ################################################## # Delay Pools - controle de Banda ################################################## #O Squid oferece uma forma simples de limitar o uso da banda disponivel e definir o quanto cada usuario pode usar #(mantendo parte do link livre para os demais), utilizando um recurso chamado "delay pools". Por exemplo, #imagine que voce tem um link de 1 megabit para uma rede com 20 usuarios. Se cada um puder ficar baixando o #que quiser, é provável que a rede fique saturada em determinados horários, deixando a navegação lenta para todo mundo. #Você pode evitar isso limitando a banda que cada usuário pode usar e a banda total, que todos os usuários somados #poderão usar simultaneamente. à recomendável, neste caso, que o servidor proxy (que combina todos os acessos via http) #consuma um pouco menos que o total de banda disponÃvel, de forma a sempre deixar um pouco reservado para outros protocolos. #Um link de 1 megabit (1024 kbits) corresponde a 131.072 bytes por segundo. Nas regras do Squid, sempre usamos bytes, #por isso lembre-se de fazer a conversão, dividindo tudo por 8 e multiplicando por 1024 para ter o número em bytes. #Podemos limitar a banda total usada pelo Squid a 114.688 bytes por segundo, deixando 128 kbits do link livres #para outros protocolos e limitar cada usuário a no máximo 16.384 bytes por segundo, que correspondem a 128 kbits. #Nem todos os usuários vão ficar baixando arquivos a todo momento, por isso o valor ideal reservado a cada usuário #vai variar muito de acordo com a rede. Você pode acompanhar o uso do link e ir ajustando o valor conforme a utilização. ################################################## #delay_pools 1 #delay_class 1 2 #delay_parameters 1 81920/81920 10240/10240 #delay_access 1 allow restritos #lanhouse ################################################## ## dst --> Esta acl e para o endereco IP do servidor de destino Ex.: acl aclname dst 207.126.99.164/32 ## src --> Esta acl e para o endereco IP do cliente. Ex.: acl aclname src 192. ## srcdomain --> Esta acl e para dominios locais Ex.:acl aclname srcdomain .localdomain.com.br ## dstdomain --> Esta acl e para dominios destinos Ex.: acl aclname dstdomain .microsoft.com ## url_regex --> Esta acl e uma pesquisa em todo a url por expressões regulares.# ## e case-sensitive. Com a opcao -i case-insesitive Ex.: acl aclname url_regex -i sexo ## urlpath_regex --> Esta acl e uma pesquisa na url desconsiderando o protocolo e hostname por expressões regulares. ## e case-sensitive.Ex.: acl aclname urlpath_regex sexo ## Para http://www.uol.com.br/sexo.html a pesquisa será realizada apos http://www.uol.com.br. ################################################## #acl notporn dstdomain -i "/etc/squid/restricoes/notporn.dat" acl porn-sites dstdomain -i "/etc/squid/restricoes/porn-sites.dat" acl bad-sites dstdomain -i "/etc/squid/restricoes/bad-sites.dat" #acl porn url_regex -i "/etc/squid/restricoes/porn.dat" #acl denied url_regex -i "/etc/squid/restricoes/denied.dat" #acl adsware dstdomain -i "/etc/squid/restricoes/adsware.dat" #acl malvaware dstdomain -i "/etc/squid/restricoes/malvaware.dat" #acl downloads url_regex -i "/etc/squid/restricoes/download.dat" http_access allow manager localhost #http_access deny adsware #http_access deny malware http_access deny !Safe_ports http_access deny CONNECT !SSL_ports #http_access allow autenticacao http_access allow tudo_liberado #http_access allow notporn #http_access deny maximo_conexoes restritos http_access deny manager http_access allow purge localhost #http_access deny purge http_access deny bad-sites #http_access deny denied http_access deny porn-sites #http_access deny porn http_access allow restritos http_access allow lanhouse http_access deny all http_reply_access allow all icp_access allow all #zph_tos_local 16 #valor do tos necessário para o cache funcionar a toda velocidade. #zph_tos_parent off forwarded_for off detect_broken_pconn on pipeline_prefetch on # >> Bloqueio com base no horário << #acl madrugada time 00:00-06:00 #http_access deny madrugada #acl manha time 06:00-12:00 #http_access deny manha #acl almoco time 12:00-14:00 #http_access deny almoco #acl tarde time 14:00-19:00 #http_access deny tarde #acl noite time 19:00-24:00 #http_access deny noite ################################################## # E-Mail do responsável pelo Proxy. ################################################## cache_mgr [email protected] ################################################## # Usuário do sistema responsavel pelo processo do Proxy # Grupo do sistema, no qual o responsavel faz parte ################################################## cache_effective_user proxy cache_effective_group proxy visible_hostname Zeus.monteolimpo.skyline ################################################## # Período para descartar arquivos não utilizados # Essa configuração é responsável por são sobrecarregar o proxy. ################################################## announce_period 30 day ################################################## # Trabalhando com Base de Dados para um melhor controle ################################################## client_db on netdb_low 900 netdb_high 1000 ################################################## #Dependendo da Versao do Linux pode mudar a localizacao dos dados squid ################################################## icon_directory /usr/share/squid/icons # Diretorio de icones error_directory /usr/share/squid/errors/Portuguese # Diretorio das mensagens de erro #icon_directory /usr/lib/squid/icons # Diretorio de icones #error_directory /usr/lib/squid/errors/Portuguese # Diretório das mensagens de erroo coredump_dir /var/spool/squid/cache # Diretorio para CoreDump #Arquivos de Erros Personalisados #deny_info ERR_ACCESS_PORNO porn porn-sites #deny_info ERR_ACCESS_DOWN download #deny_info ERR_ACCESS_NEGADO denied bad-sites #deny_info ERR_ACCESS_MANU manutencao ################################################## # Habilita o Internet Explorer 5.5 SP1 ou superior a atualizar um site ################################################## ie_refresh on #****************** Fim ****************
