[squid-users] TPROXY Problem

From: Farhad Ibragimov <inara.ibragimova_at_gmail.com>
Date: Sun, 23 Aug 2009 13:17:43 +0500

Hi squid guru

My server was configured with the following instruction
http://wiki.squid-cache.org/Features/Tproxy4
but not working. Please help me to resolve my problem

Squid version 3.1.0.13
iptables 1.4.3
2.6.30.5-second #1 SMP Sun Aug 23 03:36:29 AZST 2009 x86_64 x86_64 x86_64 GNU/Linu

my squid configuration

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access allow all
http_port 3128
http_port 3129 tproxy
hierarchy_stoplist cgi-bin ?
coredump_dir /var/squid/cache
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
access_log /var/squid/logs/access.log squid
cache_log /var/squid/logs/cache.log
cache_store_log /var/squid/logs/store.log
cache_dir ufs /cache 6000 16 256
cache_dir ufs /cache2 6000 16 256
visible_hostname proxymain.caspel.com
cache_effective_user squid
cache_effective_group squid

ACCESS LOGS
1250983412.365 132598 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/uk/2009/08/090822_uk_cars_scrappagescheme.shtml - DIRECT/www.bbc.co.uk -
1250983461.913 181020 85.132.47.219 TCP_MISS/504 4136 GET http://ru.fxfeeds.mozilla.com/ru/firefox/headlines.xml - DIRECT/63.245.209.93 text/html
1250983545.928 60793 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.136 -
1250983596.266 110348 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/russia/2009/08/090822_russia_nationalflag_denisov.shtml - DIRECT/www.bbc.co.uk -
1250983606.943 60881 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.136 -
1250983665.956 180454 85.132.47.219 TCP_MISS/504 4172 GET http://ru.fxfeeds.mozilla.com/ru/firefox/headlines.xml - DIRECT/63.245.209.93 text/html
1250983667.240 60163 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.136 -
1250983944.639 42813 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/international/2009/08/090822_koreas_talks.shtml - DIRECT/www.bbc.co.uk -
1250983970.736 26021 85.132.47.219 TCP_MISS/000 0 GET http://www.az/ - DIRECT/www.az -
1250984008.591 37771 85.132.47.219 TCP_MISS/000 0 GET http://www.az/ - DIRECT/www.az -
1250984041.530 32818 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/russia/2009/08/090820_sayano_water_unload.shtml - DIRECT/www.bbc.co.uk -
1250984262.778 180279 85.132.47.219 TCP_MISS/504 4475 GET http://www.bbc.co.uk/russian/uk/2009/08/090822_uk_cars_scrappagescheme.shtml - DIRECT/212.58.253.68 text/html
1250984444.874 181848 85.132.47.219 TCP_MISS/504 4140 GET http://www.squid-cache.org/Artwork/SN.png - DIRECT/12.160.37.9 text/html
1250984497.703 129156 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/uk/2009/08/090822_uk_cars_scrappagescheme.shtml - DIRECT/www.bbc.co.uk -
1250984505.769 7949 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/uk/2009/08/090822_uk_cars_scrappagescheme.shtml - DIRECT/www.bbc.co.uk -
1250984573.536 67671 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/international/2009/08/090822_afghan_monitors.shtml - DIRECT/www.bbc.co.uk -
1250984580.759 7110 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/uk/2009/08/090822_uk_cars_scrappagescheme.shtml - DIRECT/www.bbc.co.uk -
1250984626.954 41931 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/uk/2009/08/090822_tourists_fake.shtml - DIRECT/www.bbc.co.uk -
1250984664.987 60613 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250984715.016 87967 85.132.47.219 TCP_MISS/000 0 GET http://www.bbc.co.uk/russian/russia/2009/08/090820_sayano_water_unload.shtml - DIRECT/www.bbc.co.uk -
1250984725.056 59957 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250984769.088 180796 85.132.47.219 TCP_MISS/504 4088 GET http://ru.fxfeeds.mozilla.com/ru/firefox/headlines.xml - DIRECT/63.245.209.93 text/html
1250984785.096 59910 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250984845.138 59927 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250984895.167 180070 85.132.47.219 TCP_MISS/504 3932 GET http://www.az/ - DIRECT/217.14.96.36 text/html
1250984905.179 59916 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250984965.215 59860 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250985025.254 59900 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250985075.280 179866 85.132.47.219 TCP_MISS/504 4022 GET http://www.squid-cache.org/Artwork/SN.png - DIRECT/12.160.37.9 text/html
1250985081.293 179863 85.132.47.219 TCP_MISS/504 4124 GET http://ru.fxfeeds.mozilla.com/ru/firefox/headlines.xml - DIRECT/63.245.209.93 text/html
1250985085.293 59904 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250985145.327 59914 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250985205.364 59865 85.132.47.219 TCP_MISS/503 0 CONNECT sb-ssl.google.com:443 - DIRECT/216.239.59.91 -
1250985211.759 115557 85.132.47.219 TCP_MISS/000 0 GET http://www.az/ - DIRECT/www.az -
1250985255.375 179886 85.132.47.219 TCP_MISS/504 3933 GET http://www.az/favicon.ico - DIRECT/217.14.96.36 text/html
1250985261.382 179854 85.132.47.219 TCP_MISS/504 4088 GET http://ru.fxfeeds.mozilla.com/ru/firefox/headlines.xml - DIRECT/63.245.209.93 text/html
1250985381.454 169615 85.132.47.219 TCP_MISS/000 0 GET http://www.az/ - DIRECT/www.az -
1250985406.570 25030 85.132.47.219 TCP_MISS/000 0 GET http://www.az/ - DIRECT/www.az -
1250985414.990 8333 85.132.47.219 TCP_MISS/000 0 GET http://www.az/ - DIRECT/www.az -
1250985427.578 12507 85.132.47.219 TCP_MISS/000 0 GET http://www.ru/ - DIRECT/www.ru -
1250985435.459 179838 85.132.47.219 TCP_MISS/504 3965 GET http://www.az/favicon.ico - DIRECT/217.14.96.36 text/html
1250985607.535 179877 85.132.47.219 TCP_MISS/504 3973 GET http://www.az/ - DIRECT/217.14.96.36 text/html
1250992535.526 179564 213.56.194.23 TCP_MISS/504 3358 GET http://85.132.32.34/myAdmin//scripts/setup.php - DIRECT/85.132.32.34 text/html
1250992715.606 179872 213.56.194.23 TCP_MISS/504 3356 GET http://85.132.32.34/phpadmin/scripts/setup.php - DIRECT/85.132.32.34 text/html
1250992895.678 179863 213.56.194.23 TCP_MISS/504 3362 GET http://85.132.32.34/phpMyAdmin/scripts/setup.php - DIRECT/85.132.32.34 text/html
1250993075.757 179871 213.56.194.23 TCP_MISS/504 3362 GET http://85.132.32.34/phpmyadmin/scripts/setup.php - DIRECT/85.132.32.34 text/html
1251012293.685 180310 85.132.47.219 TCP_MISS/504 3973 GET http://www.az/ - DIRECT/217.14.96.36 text/html
1251012474.751 180716 85.132.47.219 TCP_MISS/504 4022 GET http://www.squid-cache.org/Artwork/SN.png - DIRECT/12.160.37.9 text/html
1251012606.817 180579 85.132.47.219 TCP_MISS/504 3973 GET http://www.az/ - DIRECT/217.14.96.36 text/html

  

-- 
Best regards,
 Farhad                          mailto:inara.ibragimova_at_gmail.com
Received on Sun Aug 23 2009 - 08:17:54 MDT

This archive was generated by hypermail 2.2.0 : Mon Aug 24 2009 - 12:00:04 MDT