Re: [squid-users] update problem

From: David C. Heitmann <david_at_lafourmi.de>
Date: Tue, 02 Feb 2010 10:59:11 +0100

Jeff Peng schrieb:
> 在 2010-02-01一的 14:48 +0100,David C. Heitmann写道:
>
>> what have i to do, to upgrade squid version 2.7 stable 3 to the new
>> release?
>>
>
> Just get the latest release source from squid-cache.org, then compile
> and install it from the source.
>
> In the source dir there is an INSTALL file you could reference to.
>
> This is my idea:
>
> 1) stop the old squid instance;
> 2) install the new one into the same dir as the old one, then you could
> keep the old config file for using;
> 3) squid -z && squid -D, initialize cachedir and start new squid.
>
> HTH.
>
>
>

i have update it and it dosent start :( :( :(
from 2.7 stable3 to 3.1.0.16
i have installed from tutorial INSTALL in the archive of 3.1.0.16

mistake:
/usr/local/squid/sbin/squid -N -d 1
...
assertion failed: peer_select.cc:627: "sizeof(hier_strings) == (HIER_MAX
+ 1) * sizeof(char *)"
faild to start!

Can you help me please
squid doesent started!

my config is in attachment
thanks to regard
gretts david

# Netzwerkverbindungen
http_port 192.168.10.10:8080
http_port 192.168.10.10:3128

# ICP Protokoll
icp_port 0

# Speichergroesse
cache_mem 256 MB
ipcache_size 5000

# Cache-Verzeichnisse
cache_dir ufs /usr/local/squid/var/cache 4096 16 256

# Leave coredumps in the first cache dir
coredump_dir /usr/local/squid/var/cache

# We recommend you to use at least the following line.
hierarchy_stoplist cgi-bin ?

# Bestimmte Objekte nicht speichern
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

# Gesperrte Ausdrücke
acl gesperrt url_regex -i "/etc/squid/gesperrt"
http_access deny gesperrt

# Logfile-Path
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log

# Prozess-ID-Datei
pid_filename /var/run/squid.pid

# Logging der IP-Adresse oder Rechner-Names
log_fqdn on

# eMail Adresse des Admins
cache_mgr david_at_lafourmi.de

# Standartuser und -gruppe
cache_effective_user squid
cache_effective_group squid

# Vollstaendiger Rechnername
visible_hostname proxyfuck

# Anonymisieren der IP-Adresse
forwarded_for off

# Proxy nicht erkennbar im Internet
via on

# AntiVirus
redirect_program /usr/bin/squidvir.pl

# Authentifizierung mittels Passwortdatei
auth_param basic program /usr/lib/squid/ncsa_auth /squid/users/.pass
auth_param basic realm Authentifizierung am ProxyServer Lafourmi
auth_param basic children 10
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
authenticate_cache_garbage_interval 3600 seconds
authenticate_ttl 1 hour
authenticate_ip_ttl 3600 seconds

acl passwd proxy_auth REQUIRED
acl login_users proxy_auth "/etc/squid/users"
acl login_admin proxy_auth "/etc/squid/admin"

# Access Control Lists (ACL)
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl localhost src ::1/128
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl to_localhost dst ::1/128
acl laf src 192.168.10.0/24

acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl localnet src fc00::/7 # RFC 4193 local private network range
acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines

acl SSL_ports port 443 # ssl
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http

#acl Safe_ports port 1863 #msn
#acl AIM_ports port 5190 #aim

acl CONNECT method CONNECT

# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager

# Deny requests to certain unsafe ports
http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

http_access allow laf
http_access allow localhost

http_access allow login_users
http_access allow login_admin

# And finally deny all other access to this proxy
http_access deny all

# AOL Instant Messenger
#acl AIM_domains dstdomain .oscar.aol.com .blue.aol.com
#acl AIM_domains dstdomain .messaging.aol.com .aim.com
#acl AIM_nets dst 64.12.0.0/16 205.188.0.0/16
#http_access deny CONNECT AIM_ports AIM_nets
#http_access deny CONNECT AIM_ports AIM_domains

# MSN Messenger
acl msngw url_regex -i gateway.dll
acl msnd dstdomain messenger.msn.com gateway.messenger.hotmail.com
acl msnmime req_mime_type ^application/x-msn-messenger
http_access deny msngw
http_access deny msnd
http_access deny msnmime

# AOL
#acl aol dst 64.12.200.89/32 64.12.161.153/32 64.12.161.185/32
#acl aol dst 205.188.153.121/32 205.188.179.233/32
#http_access deny aol

# Gizmo Project
#acl gizmo dstdomain .gizmoproject.com
#acl gizmo dstdomain .talqer.com .gizmocall.com .fring.com
#acl gizmo dstdomain .pidgin.im
#http_access deny gizmo

# ICQ
#acl icq dstdomain .icq.com
#acl icqmimeq req_mime_type application/x-icq
#acl icqmimep rep_mime_type application/x-icq
#http_access deny icq
#http_access deny icqmimeq
#http_access deny icqmimep

# Skype (Block)
#acl numeric_IPs url_regex ^(([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)|(\[([0-9af]+)?:([0-9af:]+)?:([0-9af]+)?\])):443
#acl Skype_UA browser ^skype^
#http_access deny numeric_IPS
#http_access deny Skype_UA

# Skype (Allow)
#acl numeric_IPs url_regex ^(([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)|(\[([0-9af]+)?:([0-9af:]+)?:([0-9af+)?\])):443
#acl Skype_UA browser ^skype^
#http_access allow CONNECT localnet numeric_IPS Skype_UA

# Trillian
#acl trillian dst 66.216.70.167/32
#http_access deny trillian

# Yahoo! Messenger
#acl ym dstdomain .messenger.yahoo.com .psq.yahoo.com
#acl ym dstdomain .us.il.yimg.com .msg.yahoo.com .pager.yahoo.com
#acl ym dstdomain .rareedge.com .ytunnelpro.com .chat.yahoo.com
#acl ym dstdomain .voice.yahoo.com
#acl ymregex url_regex yupdater.yim ymsgr myspaceim
#acl ym dstdomain .skype.com .imvu.com
#http_access deny ym
#http_access deny ymregex

# Schutz der Privatsphäre im Internet
#header_access Proxy-Authorization allow all
#header_access Proxy-Authenticate allow all
#header_access Cache-Control allow all
#header_access From deny all
#header_access Referer deny all
#header_access Server deny all
#header_access Link deny all
#header_access Warning deny all
#header_access via deny all
#header_access User-Agent deny all
#header_access Proxy-Connection deny all
#header_access X-Forwarded-For deny all
#header_access Pragma deny all
#header_access Keep-Alive deny all
#header_access X-Cache deny all
#header_access X-Cache-Lookup deny all
#header_access Authorization allow all
#header_access Content-Disposition allow all
#header_access Content-Encoding allow all
#header_access Content-Length allow all
#header_access Content-Type allow all
#header_access Cookie allow all
#header_access Host allow all
#header_access Location allow all
#header_access Range allow all
#header_access Set-Cookie allow all
#header_access WWW-Authenticate allow all
#header_access All deny all

# Bestimmte URLs ausschliessen
#acl banner url_regex ^http://banner[0-9]*\.z
#http_access deny banner

# Laden von Dateien verhindern, wenn abgebrochen wurde
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 100

# Add any of your own refresh_pattern entries above these.
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
Received on Tue Feb 02 2010 - 10:00:01 MST

This archive was generated by hypermail 2.2.0 : Tue Feb 02 2010 - 12:00:03 MST