LinuxForum.Fans
Тема

Прошу помочь разобраться с настройкой squid+squidGuard+sams

Автор: g_zasim 35 сообщений 7150 просмотров
27.05.2012 12:40 #254617

Доброго времени суток.
прошу помочь разобраться и решить проблему. имеется ubuntu 10.04.4 squid: 2.7.stable7
squidGuard 1.2
sams 1.0.5 ubuntu 9.04 (вроде) авторизация ip.
Самс работает нормально. сквид работает. сквидГвард тестирование проходит:

echo "example.kom 10.0.0.1/ - - GET" | squidGuard -c /etc/squid/squidGuard.conf -d

во всяком случае ругани нет.
но стоит прописать в squid.conf url_rewrite_program и ссылка на squidGuard. выпадает в fatal

tail -f /var/log/squid/cache.log -n 120
2012/05/27 13:55:40| Processing: 'hosts_file /etc/hosts'
2012/05/27 13:55:40| parse_line: hosts_file /etc/hosts
2012/05/27 13:55:40| Processing: 'memory_pools on'
2012/05/27 13:55:40| parse_line: memory_pools on
2012/05/27 13:55:40| Processing: 'memory_pools_limit 57 MB'
2012/05/27 13:55:40| parse_line: memory_pools_limit 57 MB
2012/05/27 13:55:40| Processing: 'coredump_dir /var/spool/squid'
2012/05/27 13:55:40| parse_line: coredump_dir /var/spool/squid
2012/05/27 13:55:40| parse_line: http_reply_access allow all
2012/05/27 13:55:40| aclParseAclList: looking for ACL name 'all'
2012/05/27 13:55:40| parse_line: htcp_access deny all
2012/05/27 13:55:40| aclParseAclList: looking for ACL name 'all'
2012/05/27 13:55:40| parse_line: htcp_clr_access deny all
2012/05/27 13:55:40| aclParseAclList: looking for ACL name 'all'
2012/05/27 13:55:40| parse_line: ident_lookup_access deny all
2012/05/27 13:55:40| aclParseAclList: looking for ACL name 'all'
2012/05/27 13:55:40| parse_line: reply_body_max_size 0 allow all
2012/05/27 13:55:40| aclParseAclList: looking for ACL name 'all'
2012/05/27 13:55:40| parse_line: follow_x_forwarded_for deny all
2012/05/27 13:55:40| aclParseAclList: looking for ACL name 'all'
2012/05/27 13:55:40| parse_line: snmp_access deny all
2012/05/27 13:55:40| aclParseAclList: looking for ACL name 'all'
2012/05/27 13:55:40| parse_line: dns_testnames netscape.com
2012/05/27 13:55:40| cachemgrRegister: Duplicate 'config'
2012/05/27 13:55:40| leave_suid: PID 31371 called
2012/05/27 13:55:40| leave_suid: PID 31371 giving up root, becoming 'proxy'
2012/05/27 13:55:40| logfileOpen: opening log /var/log/squid/access.log
2012/05/27 13:55:40| logfileOpen: opening log /var/log/squid/store.log
2012/05/27 13:55:40| User-Agent logging is disabled.
2012/05/27 13:55:40| Referer logging is disabled.
2012/05/27 13:55:40| DNS Socket created at 0.0.0.0, port 48601, FD 8
2012/05/27 13:55:40| Adding nameserver 217.19.115.30 from /etc/resolv.conf
2012/05/27 13:55:40| Adding nameserver 192.168.190.1 from /etc/resolv.conf
2012/05/27 13:55:40| Adding domain school9.miass.ru from /etc/resolv.conf
2012/05/27 13:55:40| Adding domain school9.miass.ru from /etc/resolv.conf
2012/05/27 13:55:40| helperOpenServers: Starting 20 'squidGuard' processes
2012/05/27 13:55:41| Unlinkd pipe opened on FD 35
2012/05/27 13:55:41| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 33.
2012/05/27 13:55:41| Accepting ICP messages at 0.0.0.0, port 3130, FD 34.
2012/05/27 13:55:41| HTCP Disabled.
2012/05/27 13:55:41| WCCP Disabled.
2012/05/27 13:55:41| Loaded Icons.
2012/05/27 13:55:41| Ready to serve requests.
2012/05/27 13:55:41| WARNING: url_rewriter #1 (FD 9) exited
2012/05/27 13:55:41| WARNING: url_rewriter #2 (FD 10) exited
2012/05/27 13:55:41| WARNING: url_rewriter #3 (FD 12) exited
2012/05/27 13:55:42| WARNING: url_rewriter #5 (FD 15) exited
2012/05/27 13:55:42| WARNING: url_rewriter #4 (FD 14) exited
2012/05/27 13:55:42| WARNING: url_rewriter #6 (FD 17) exited
2012/05/27 13:55:42| WARNING: url_rewriter #9 (FD 20) exited
2012/05/27 13:55:42| WARNING: url_rewriter #7 (FD 18) exited
2012/05/27 13:55:42| WARNING: url_rewriter #8 (FD 19) exited
2012/05/27 13:55:42| WARNING: url_rewriter #11 (FD 22) exited
2012/05/27 13:55:42| Too few url_rewriter processes are running
2012/05/27 13:55:42| storeDirWriteCleanLogs: Starting...
2012/05/27 13:55:42| 65536 entries written so far.
2012/05/27 13:55:42| Finished. Wrote 124149 entries.
2012/05/27 13:55:42| Took 0.2 seconds (589663.8 entries/sec).
FATAL: The url_rewriter helpers are crashing too rapidly, need help!

Squid Cache (Version 2.7.STABLE7): Terminated abnormally.
CPU Usage: 2.928 seconds = 1.372 user + 1.556 sys
Maximum Resident Size: 72896 KB
Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
total space in arena: 15564 KB
Ordinary blocks: 15143 KB 11 blks
Small blocks: 0 KB 0 blks
Holding blocks: 280 KB 1 blks
Free Small blocks: 0 KB
Free Ordinary blocks: 420 KB
Total in use: 15423 KB 97%
Total free: 420 KB 3%

27.05.2012 12:54 · отредактировано #254621

на какие папки то права? вроде все стоит.
в том-то и дело, что по логам все ок'

text

tail -f /var/log/squid/squidGuard.log -n 60
2012-05-27 13:55:42 [31440] init domainlist /var/lib/squidguard/db/webradio/domains
2012-05-27 13:55:42 [31440] loading dbfile /var/lib/squidguard/db/webradio/domains.db
2012-05-27 13:55:42 [31441] init domainlist /var/lib/squidguard/db/violence/domains
2012-05-27 13:55:42 [31441] loading dbfile /var/lib/squidguard/db/violence/domains.db
2012-05-27 13:55:42 [31441] init urllist /var/lib/squidguard/db/violence/urls
2012-05-27 13:55:42 [31441] loading dbfile /var/lib/squidguard/db/violence/urls.db
2012-05-27 13:55:42 [31441] init domainlist /var/lib/squidguard/db/warez/domains
2012-05-27 13:55:42 [31441] loading dbfile /var/lib/squidguard/db/warez/domains.db
2012-05-27 13:55:42 [31439] init domainlist /var/lib/squidguard/db/webradio/domains
2012-05-27 13:55:42 [31439] loading dbfile /var/lib/squidguard/db/webradio/domains.db
2012-05-27 13:55:42 [31438] init domainlist /var/lib/squidguard/db/webradio/domains
2012-05-27 13:55:42 [31438] loading dbfile /var/lib/squidguard/db/webradio/domains.db
2012-05-27 13:55:42 [31438] init urllist /var/lib/squidguard/db/webradio/urls
2012-05-27 13:55:42 [31438] loading dbfile /var/lib/squidguard/db/webradio/urls.db
2012-05-27 13:55:42 [31436] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 13:55:42 [31436] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 13:55:42 [31436] squidGuard 1.2.0 started (1338105340.905)
2012-05-27 13:55:42 [31436] db update done
2012-05-27 13:55:42 [31436] squidGuard stopped (1338105342.332)
2012-05-27 13:55:42 [31437] squidGuard 1.2.0 started (1338105340.925)
2012-05-27 13:55:42 [31437] db update done
2012-05-27 13:55:42 [31437] squidGuard stopped (1338105342.338)
2012-05-27 13:55:42 [31439] init urllist /var/lib/squidguard/db/webradio/urls
2012-05-27 13:55:42 [31439] loading dbfile /var/lib/squidguard/db/webradio/urls.db
2012-05-27 13:55:42 [31439] init domainlist /var/lib/squidguard/db/webtv/domains
2012-05-27 13:55:42 [31439] loading dbfile /var/lib/squidguard/db/webtv/domains.db
2012-05-27 13:55:42 [31439] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 13:55:42 [31440] init urllist /var/lib/squidguard/db/webradio/urls
2012-05-27 13:55:42 [31440] loading dbfile /var/lib/squidguard/db/webradio/urls.db
2012-05-27 13:55:42 [31440] init domainlist /var/lib/squidguard/db/webtv/domains
2012-05-27 13:55:42 [31440] loading dbfile /var/lib/squidguard/db/webtv/domains.db
2012-05-27 13:55:42 [31441] init urllist /var/lib/squidguard/db/warez/urls
2012-05-27 13:55:42 [31441] loading dbfile /var/lib/squidguard/db/warez/urls.db
2012-05-27 13:55:42 [31441] init domainlist /var/lib/squidguard/db/webradio/domains
2012-05-27 13:55:42 [31441] loading dbfile /var/lib/squidguard/db/webradio/domains.db
2012-05-27 13:55:42 [31441] init urllist /var/lib/squidguard/db/webradio/urls
2012-05-27 13:55:42 [31441] loading dbfile /var/lib/squidguard/db/webradio/urls.db
2012-05-27 13:55:42 [31438] init domainlist /var/lib/squidguard/db/webtv/domains
2012-05-27 13:55:42 [31438] loading dbfile /var/lib/squidguard/db/webtv/domains.db
2012-05-27 13:55:42 [31438] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 13:55:42 [31438] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 13:55:42 [31438] squidGuard 1.2.0 started (1338105341.009)
2012-05-27 13:55:42 [31438] db update done
2012-05-27 13:55:42 [31438] squidGuard stopped (1338105342.365)
2012-05-27 13:55:42 [31439] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 13:55:42 [31439] squidGuard 1.2.0 started (1338105341.017)
2012-05-27 13:55:42 [31439] db update done
2012-05-27 13:55:42 [31439] squidGuard stopped (1338105342.367)
2012-05-27 13:55:42 [31440] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 13:55:42 [31440] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 13:55:42 [31440] squidGuard 1.2.0 started (1338105341.044)
2012-05-27 13:55:42 [31440] db update done
2012-05-27 13:55:42 [31440] squidGuard stopped (1338105342.372)
2012-05-27 13:55:42 [31441] init domainlist /var/lib/squidguard/db/webtv/domains
2012-05-27 13:55:42 [31441] loading dbfile /var/lib/squidguard/db/webtv/domains.db
2012-05-27 13:55:42 [31441] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 13:55:42 [31441] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 13:55:42 [31441] squidGuard 1.2.0 started (1338105341.057)
2012-05-27 13:55:42 [31441] db update done
2012-05-27 13:55:42 [31441] squidGuard stopped (1338105342.389)

а вот насчет AppArmor по подробнее можно?

27.05.2012 13:01 #254622

Используйте теги, читать сложно.
Вот что пишут на форуме

Hi there. don't know if you got it sorted out but usually its a permissions issue.
On my server, once i have run the 'sudo squidGuard -C all', i have to run 'sudo chown -R proxy: proxy /var/lib/squidguard/db' , and then 'sudo chmod -R 777 /var/lib/squidguard/db'.

then i can start squid and it works
Hope this helps

regards,
Adrian
27.05.2012 13:02 #254623

g.zasim свои полотна плиз облочай в теги [ code ] [ /code ]

27.05.2012 13:06 #254625

Покажите файл /etc/apparmor.d/usr.sbin.squid
а лучше

text
ls -la /etc/apparmor.d/
27.05.2012 13:12 · отредактировано #254627

AppArmor

text
ls -la /etc/apparmor.d
итого 48
drwxr-xr-x  6 root root 4096 2012-05-27 15:02 .
drwxr-xr-x 95 root root 4096 2012-05-27 13:14 ..
drwxr-xr-x  2 root root 4096 2012-04-28 16:46 abstractions
drwxr-xr-x  2 root root 4096 2011-08-11 22:12 force-complain
drwxr-xr-x  2 root root 4096 2012-04-28 18:47 local
-rw-r--r--  1 root root 1944 2011-08-11 22:10 sbin.dhclient3
drwxr-xr-x  3 root root 4096 2012-05-02 11:43 tunables
-rw-r--r--  1 root root 1005 2011-10-28 20:44 usr.bin.freshclam
-rw-r--r--  1 root root  819 2011-02-10 13:54 usr.sbin.mysqld
-rw-r--r--  1 root root 1162 2011-11-17 02:30 usr.sbin.named
-rw-r--r--  1 root root 1470 2011-04-19 13:08 usr.sbin.ntpd
-rw-r--r--  1 root root  827 2010-03-24 00:29 usr.sbin.tcpdump

а после установки файлов лучше не стало. тоже самое. почти:

text

2012/05/27 15:10:03| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 19.
2012/05/27 15:10:03| Accepting ICP messages at 0.0.0.0, port 3130, FD 20.
2012/05/27 15:10:03| HTCP Disabled.
2012/05/27 15:10:03| WCCP Disabled.
2012/05/27 15:10:03| Ready to serve requests.
2012/05/27 15:10:03| WARNING: url_rewriter #1 (FD 7) exited
2012/05/27 15:10:03| WARNING: url_rewriter #3 (FD 9) exited
2012/05/27 15:10:03| WARNING: url_rewriter #2 (FD 8) exited
2012/05/27 15:10:03| Too few url_rewriter processes are running
FATAL: The url_rewriter helpers are crashing too rapidly, need help!

Squid Cache (Version 2.7.STABLE7): Terminated abnormally.
CPU Usage: 0.064 seconds = 0.028 user + 0.036 sys
Maximum Resident Size: 19328 KB
Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
        total space in arena:    2256 KB
        Ordinary blocks:         2212 KB      3 blks
        Small blocks:               0 KB      0 blks
        Holding blocks:           480 KB      2 blks
        Free Small blocks:          0 KB
        Free Ordinary blocks:      43 KB
        Total in use:            2692 KB 98%
        Total free:                43 KB 2%

конфиги могу предоставить. если поможет

неужели все так грустно?

27.05.2012 14:35 #254644

А покажыка конфиг сквида и конфиг СквидГуарда, виполнив вот так, кажысь

text
cat squid.conf | sed '/#/d' | sed '/^$/d'
27.05.2012 14:55 · отредактировано #254649

cat squid_1.conf | grep -v "^#"|grep -v "^$"
squidGuard.conf

text

dbhome /var/lib/squidguard/db
logdir /var/log/squid
time workhours {
    weekly smtwhfa 00:00 - 23:59
}
src admin {
    ip        192.168.0.160 
    }
src uch {
    ip        192.168.0.10-192.168.0.254 
    within          workhours
        }
dest abortion {
    domainlist     abortion/domains
    urllist        abortion/urls
}
dest ads {
    domainlist     ads/domains
    urllist        ads/urls
    expressionlist ads/expressions
}
dest adult {
    domainlist     adult/domains
    urllist        adult/urls
}
dest adv {
    domainlist     adv/domains
    urllist        adv/urls
}
dest aggressive {
    domainlist     aggressive/domains
    urllist        aggressive/urls
}
dest alcohol {
    domainlist     alcohol/domains
    urllist        alcohol/urls
}
dest anonvpn {
    domainlist     anonvpn/domains
    urllist        anonvpn/urls
}
dest antispyware {
    domainlist     antispyware/domains
    urllist        antispyware/urls
}
dest artnudes {
    domainlist     artnudes/domains
    urllist        artnudes/urls
}
dest astrology {
    domainlist     astrology/domains
    urllist        astrology/urls
}
dest audio-video {
    domainlist     audio-video/domains
    urllist        audio-video/urls
}
dest banners {
    domainlist     banners/domains
    urllist        banners/urls
    expressionlist banners/expressions
}
dest gamble {
    domainlist     gamble/domains
    urllist        gamble/urls
}
dest drugs {
    domainlist     drugs/domains
    urllist        drugs/urls
}
dest fortunetelling {
    domainlist     fortunetelling/domains
    urllist        fortunetelling/urls
}
dest hacking {
    domainlist     hacking/domains
    urllist        hacking/urls
}
dest porn {
    domainlist     porn/domains
    urllist        porn/urls
}
dest proxy {
    domainlist     proxy/domains
    urllist        proxy/urls
}
dest sex/education {
    domainlist     sex/education/domains
    urllist        sex/education/urls
}
dest violence {
    domainlist     violence/domains
    urllist        violence/urls
}
dest warez {
    domainlist     warez/domains
    urllist        warez/urls
}
dest webradio {
    domainlist     webradio/domains
    urllist       webradio/urls
}
dest webtv  {
     domainlist     webtv/domains
     urllist        webtv/urls
}
acl {
    admin {
            pass !banners all
    }
    uch within workhours  {
         pass !abortion !ads !adult !adv !aggressive !alcohol !audio-video !anonvpn !antispyware !artnudes !astrology !audio-video !banners !drugs !gamble !hacking !porn !proxy !sex/education !violence !warez !webradio !webtv all              
redirect ...
    }
    default within workhours {
                pass none
                log default
        }
}

а вот squid.conf не могу. ругается на большое количество ссылок

27.05.2012 15:07 · отредактировано #254652

А от какого пользователя работает сквид, а от какого пользователя работает сквидГуард??? Посмотри чтобы у файлов сквида и сквидГуарда был одинаковый пользователь. И покажы строку из конфига кальмара где идёт вызов сквидГуарда

27.05.2012 15:15 #254653
kisil написал:
А от какого пользователя работает сквид. а от какого пользователя работает сквидГуард??? Посмотри чтобы файлов сквида и сквидГуарда был одинаковый пользователь. И покажы строку из конфига кальмара где идёт вызов сквидГуарда
text

url_rewrite_program /usr/bin/squidGuard -C /etc/squid/squidGuard.conf

сквид работает от proxy
и шелл у прокси тоже прописан
proxy:x:13:13:proxy:/bin:/bin/sh

text
 ps -aux | proxy
proxy     2185  0.5  2.2  20132 17472 ?        Ss   17:06   0:02 /usr/sbin/squid -N -D
proxy     2186  0.0  0.0   1612   372 ?        Ss   17:06   0:00 (unlinkd)
27.05.2012 15:15 · отредактировано #254654
text
 ls -la /var/lib/squidguard/db/

а ключ -C должен быть в нижнем регистре вроде как если верить вот этой доке http://www.tux.in.ua/articles/824

27.05.2012 15:22 · отредактировано #254655
text

ls -la /var/lib/squidguard/db/
итого 328
drwxrwsrwx 69 proxy proxy  4096 2012-05-03 15:47 .
drwxr-xr-x  4 proxy proxy  4096 2012-04-28 16:58 ..
drwxrwxrwx  2 proxy proxy  4096 2012-05-02 16:18 abortion
drwxrwxrwx  2 proxy proxy  4096 2012-05-02 16:18 ads
drwxrwxrwx  2 proxy proxy  4096 2012-05-02 16:20 adult
drwxrwxrwx  2 proxy proxy  4096 2012-05-02 16:20 adv
drwxrwxrwx  2 proxy proxy  4096 2012-05-02 16:20 aggressive
drwxrwxrwx  2 proxy proxy  4096 2012-05-02 16:20 alcohol
drwxrwxrwx  2 proxy proxy  4096 2012-05-02 16:20 anonvpn
drwxrwxrwx  2 proxy proxy  4096 2012-05-02 16:20 antispyware
drwxrwxrwx  2 proxy proxy  4096 2012-05-02 16:20 artnudes
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:30 astrology
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:30 audio-video
drwxrwxrwx  6 proxy proxy  4096 2012-03-11 22:45 automobile
drwxrwxrwx  2 proxy proxy  4096 2012-04-28 17:05 banking
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:30 banners
drwxrwxrwx  2 proxy proxy  4096 2012-04-28 17:05 beerliquorinfo
drwxrwxrwx  2 proxy proxy  4096 2012-04-28 17:05 beerliquorsale
drwxrwxrwx  2 proxy proxy  4096 2012-04-08 00:38 chat
-rwxrwxrwx  1 proxy proxy   803 2008-03-09 02:43 COPYRIGHT
drwxrwxrwx  2 proxy proxy  4096 2012-04-03 23:57 costtraps
drwxrwxrwx  2 proxy proxy  4096 2012-03-29 12:49 dating
drwxrwxrwx  2 proxy proxy  4096 2012-04-07 23:47 downloads
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:43 drugs
drwxrwxrwx  2 proxy proxy  4096 2012-01-29 23:54 dynamic
drwxrwxrwx  3 proxy proxy  4096 2012-03-05 00:36 education
drwxrwxrwx  8 proxy proxy  4096 2012-04-02 02:19 finance
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:43 fortunetelling
drwxrwxrwx  2 proxy proxy  4096 2012-04-08 01:08 forum
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:43 gamble
-rwxrwxrwx  1 proxy proxy 47391 2011-04-09 00:38 global_usage
drwxrwxrwx  2 proxy proxy  4096 2012-03-05 00:32 government
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:43 hacking
drwxrwxrwx  7 proxy proxy  4096 2012-04-02 01:43 hobby
drwxrwxrwx  2 proxy proxy  4096 2012-02-19 01:42 homestyle
drwxrwxrwx  2 proxy proxy  4096 2012-02-19 01:53 hospitals
drwxrwxrwx  2 proxy proxy  4096 2012-04-04 00:36 imagehosting
drwxrwxrwx  2 proxy proxy  4096 2012-04-04 00:42 isp
drwxrwxrwx  2 proxy proxy  4096 2012-04-02 02:10 jobsearch
drwxrwxrwx  2 proxy proxy  4096 2012-02-25 03:15 library
drwxrwxrwx  2 proxy proxy  4096 2012-02-13 03:25 military
drwxrwxrwx  2 proxy proxy  4096 2012-04-07 23:34 models
drwxrwxrwx  2 proxy proxy  4096 2012-04-07 23:43 movies
drwxrwxrwx  2 proxy proxy  4096 2012-04-08 00:31 music
drwxrwxrwx  2 proxy proxy  4096 2012-04-02 02:28 news
drwxrwxrwx  2 proxy proxy  4096 2012-02-06 01:16 podcasts
drwxrwxrwx  2 proxy proxy  4096 2012-02-13 03:27 politics
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:44 porn
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:50 proxy
drwxrwxrwx  2 proxy proxy  4096 2012-04-08 00:35 radiotv
drwxrwxrwx  8 proxy proxy  4096 2012-04-04 00:37 recreation
drwxrwxrwx  2 proxy proxy  4096 2012-04-09 00:55 redirector
drwxrwxrwx  2 proxy proxy  4096 2012-03-26 01:24 religion
drwxrwxrwx  2 proxy proxy  4096 2012-03-26 01:11 remotecontrol
drwxrwxrwx  2 proxy proxy  4096 2012-02-06 01:17 ringtones
drwxrwxrwx  4 proxy proxy  4096 2011-10-25 02:57 science
drwxrwxrwx  2 proxy proxy  4096 2012-03-04 16:12 searchengines
drwxrwxrwx  4 proxy proxy  4096 2012-05-03 15:50 sex
drwxrwxrwx  2 proxy proxy  4096 2012-04-08 01:05 shopping
drwxrwxrwx  2 proxy proxy  4096 2012-04-02 02:49 socialnet
drwxrwxrwx  2 proxy proxy  4096 2012-04-09 00:58 spyware
drwxrwxrwx  2 proxy proxy  4096 2012-04-07 23:46 tracker
drwxrwxrwx  2 proxy proxy  4096 2012-01-09 02:04 updatesites
drwxrwxrwx  2 proxy proxy  4096 2012-03-12 02:09 urlshortener
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:54 violence
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:54 warez
drwxrwxrwx  2 proxy proxy  4096 2012-04-02 01:47 weapons
drwxrwxrwx  2 proxy proxy  4096 2012-04-04 00:40 webmail
drwxrwxrwx  2 proxy proxy  4096 2012-01-03 00:28 webphone
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:54 webradio
drwxrwxrwx  2 proxy proxy  4096 2012-05-03 15:54 webtv
итого 328
text

ls -la /etc/squid/
итого 556
drwxr-xr-x  3 proxy proxy     4096 2012-05-27 17:17 .
drwxr-xr-x 95 root  root      4096 2012-05-27 15:27 ..
-rw-r--r--  1 root  root      1045 2012-05-27 17:03 4f9d1a58aa753.sams
-rw-r--r--  1 root  root       551 2012-05-27 17:03 disabled_ip.sams
-rw-r--r--  1 root  root        28 2012-05-27 17:03 local_ip.sams
-rw-r--r--  1 root  root         9 2012-05-27 17:03 local_url.sams
drwxr-xr-x  2 proxy nogroup   4096 2012-05-22 16:16 _sams_banlists
-rw-------  1 proxy proxy   170420 2012-05-27 17:17 squid.conf
-rw-r--r--  1 root  root    169963 2012-05-27 17:03 squid.conf.bak
-rw-------  1 root  root    169862 2012-04-28 17:27 squid.conf_full
-rw-r--r--  1 zgbgr zgbgr     2116 2012-05-04 20:01 squid.conf.kor
-rw-r--r--  1 root  root         0 2012-05-27 16:47 squidGuard_2.conf
-rw-r--r--  1 proxy proxy     7650 2012-05-22 16:16 squidGuard.bak
-rw-r--r--  1 proxy proxy     7730 2012-05-27 13:20 squidGuard.conf
-rw-r--r--  1 root  root      1960 2012-05-03 15:07 squidGuard.conf.orig

так, держу пальцы крестиком... две минут полет нормальный

27.05.2012 15:24 · отредактировано #254657
XliN написал:
text
 ls -la /var/lib/squidguard/db/

а ключ -C должен быть в нижнем регистре вроде как если верить вот этой доке http://www.tux.in.ua/articles/824

Верно нужно чтобы права на файлы базы доменов и ссылок были изменены для пользователя от которого запускаетса Сквид. А нащот ключа -С для того чтобы все файлы были переведены в формат *.db, то он в верхнем регистре. Смотрел вот тут.

27.05.2012 15:28 #254659

Запусти сквид и покажы ещё раз лог сквида и лог СквидГуарда.

27.05.2012 15:29 #254660
kisil написал:
[quote=XliN]
text
 ls -la /var/lib/squidguard/db/

а ключ -C должен быть в нижнем регистре вроде как если верить вот этой доке http://www.tux.in.ua/articles/824

Верно нужно чтобы права на файлы базы доменов и ссылок были от изменены для пользователя от которого запускаетса Сквид. А нащот ключа -С для того чтобы все файлы были переведены в формат *.db, то он в верхнем регистре. Смотрел вот тут.[/quote]


а-а-аю вон оно что.
вот этот нюанс я не разглядел. прошу извинить. за беспокйоство.

27.05.2012 15:33 #254661

Касяк в чем был? А то не понятно что поправил.

27.05.2012 15:34 #254662

Непонял. Что всё заработало?

27.05.2012 15:35 #254663

ТС обясни.!! Интересно же!!

27.05.2012 15:41 #254665
kisil написал:
ТС обясни.!! Интересно же!!

в этой строчке конфига url_rewrite_program /usr/bin/squidGuard -C /etc/squid/squidGuard.conf
ключ поставил "-с" а не "-С"
и поднялось. до этого еще проблемы были в самом конфиге гварда посему смена ключа не играла роли. сквид валился.

text

2012/05/27 17:24:20| Preparing for shutdown after 219 requests
2012/05/27 17:24:20| Waiting 30 seconds for active connections to finish
2012/05/27 17:24:20| FD 14 Closing HTTP connection
2012/05/27 17:24:20| Shutting down...
2012/05/27 17:24:20| FD 15 Closing ICP connection
2012/05/27 17:24:20| Closing unlinkd pipe on FD 12
2012/05/27 17:24:20| storeDirWriteCleanLogs: Starting...
2012/05/27 17:24:20|     65536 entries written so far.
2012/05/27 17:24:20|   Finished.  Wrote 125426 entries.
2012/05/27 17:24:20|   Took 0.1 seconds (1387240.9 entries/sec).
CPU Usage: 2.788 seconds = 1.292 user + 1.496 sys
Maximum Resident Size: 70432 KB
Page faults with physical i/o: 0
Memory usage for squid via mallinfo():
        total space in arena:   14848 KB
        Ordinary blocks:        14785 KB     57 blks
        Small blocks:               0 KB      6 blks
        Holding blocks:           280 KB      1 blks
        Free Small blocks:          0 KB
        Free Ordinary blocks:      62 KB
        Total in use:           15065 KB 100%
        Total free:                62 KB 0%
2012/05/27 17:24:20| logfileClose: closing log /var/log/squid/store.log
2012/05/27 17:24:20| logfileClose: closing log /var/log/squid/access.log
2012/05/27 17:24:20| Squid Cache (Version 2.7.STABLE7): Exiting normally.
2012/05/27 17:24:26| Starting Squid Cache version 2.7.STABLE7 for i386-debian-linux-gnu...
2012/05/27 17:24:26| Process ID 2389
2012/05/27 17:24:26| With 1024 file descriptors available
2012/05/27 17:24:26| Using epoll for the IO loop
2012/05/27 17:24:26| DNS Socket created at 0.0.0.0, port 60197, FD 6
2012/05/27 17:24:26| Adding nameserver 217.19.115.30 from /etc/resolv.conf
2012/05/27 17:24:26| Adding nameserver 192.168.190.1 from /etc/resolv.conf
2012/05/27 17:24:26| Adding domain school9.miass.ru from /etc/resolv.conf
2012/05/27 17:24:26| Adding domain school9.miass.ru from /etc/resolv.conf
2012/05/27 17:24:26| helperOpenServers: Starting 5 'squidGuard' processes
2012/05/27 17:24:26| User-Agent logging is disabled.
2012/05/27 17:24:26| Referer logging is disabled.
2012/05/27 17:24:26| logfileOpen: opening log /var/log/squid/access.log
2012/05/27 17:24:26| Unlinkd pipe opened on FD 17
2012/05/27 17:24:26| Swap maxSize 4194304 + 8192 KB, estimated 323268 objects
2012/05/27 17:24:26| Target number of buckets: 16163
2012/05/27 17:24:26| Using 16384 Store buckets
2012/05/27 17:24:26| Max Mem  size: 8192 KB
2012/05/27 17:24:26| Max Swap size: 4194304 KB
2012/05/27 17:24:26| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2012/05/27 17:24:26| logfileOpen: opening log /var/log/squid/store.log
2012/05/27 17:24:26| Rebuilding storage in /var/spool/squid (CLEAN)
2012/05/27 17:24:26| Using Least Load store dir selection
2012/05/27 17:24:26| Set Current Directory to /var/spool/squid
2012/05/27 17:24:26| Loaded Icons.
2012/05/27 17:24:26| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD 19.
2012/05/27 17:24:26| Accepting ICP messages at 0.0.0.0, port 3130, FD 20.
2012/05/27 17:24:26| HTCP Disabled.
2012/05/27 17:24:26| WCCP Disabled.
2012/05/27 17:24:26| Ready to serve requests.
2012/05/27 17:24:26| Store rebuilding is  3.3% complete
2012/05/27 17:24:28| Done reading /var/spool/squid swaplog (125426 entries)
2012/05/27 17:24:28| Finished rebuilding storage from disk.
2012/05/27 17:24:28|    125426 Entries scanned
2012/05/27 17:24:28|         0 Invalid entries.
2012/05/27 17:24:28|         0 With invalid flags.
2012/05/27 17:24:28|    125426 Objects loaded.
2012/05/27 17:24:28|         0 Objects expired.
2012/05/27 17:24:28|         0 Objects cancelled.
2012/05/27 17:24:28|         0 Duplicate URLs purged.
2012/05/27 17:24:28|         0 Swapfile clashes avoided.
2012/05/27 17:24:28|   Took 2.2 seconds (56117.5 objects/sec).
2012/05/27 17:24:28| Beginning Validation Procedure
2012/05/27 17:24:28|   Completed Validation Procedure
2012/05/27 17:24:28|   Validated 125426 Entries
2012/05/27 17:24:28|   store_swap_size = 3443340k
2012/05/27 17:24:29| storeLateRelease: released 0 objects

и

text

tail -f /var/log/squid/squidGuard.log -n 120
2012-05-27 17:24:26 [2391] init domainlist /var/lib/squidguard/db/violence/domains
2012-05-27 17:24:26 [2391] loading dbfile /var/lib/squidguard/db/violence/domains.db
2012-05-27 17:24:26 [2392] init domainlist /var/lib/squidguard/db/proxy/domains
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/proxy/domains.db
2012-05-27 17:24:26 [2392] init urllist /var/lib/squidguard/db/proxy/urls
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/proxy/urls.db
2012-05-27 17:24:26 [2392] init domainlist /var/lib/squidguard/db/sex/education/domains
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/sex/education/domains.db
2012-05-27 17:24:26 [2393] init urllist /var/lib/squidguard/db/porn/urls
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/porn/urls.db
2012-05-27 17:24:26 [2393] init domainlist /var/lib/squidguard/db/proxy/domains
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/proxy/domains.db
2012-05-27 17:24:26 [2393] init urllist /var/lib/squidguard/db/proxy/urls
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/proxy/urls.db
2012-05-27 17:24:26 [2390] init domainlist /var/lib/squidguard/db/violence/domains
2012-05-27 17:24:26 [2390] loading dbfile /var/lib/squidguard/db/violence/domains.db
2012-05-27 17:24:26 [2390] init urllist /var/lib/squidguard/db/violence/urls
2012-05-27 17:24:26 [2390] loading dbfile /var/lib/squidguard/db/violence/urls.db
2012-05-27 17:24:26 [2390] init domainlist /var/lib/squidguard/db/warez/domains
2012-05-27 17:24:26 [2390] loading dbfile /var/lib/squidguard/db/warez/domains.db
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/proxy/domains.db
2012-05-27 17:24:26 [2394] init urllist /var/lib/squidguard/db/proxy/urls
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/proxy/urls.db
2012-05-27 17:24:26 [2394] init domainlist /var/lib/squidguard/db/sex/education/domains
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/sex/education/domains.db
2012-05-27 17:24:26 [2391] init urllist /var/lib/squidguard/db/violence/urls
2012-05-27 17:24:26 [2391] loading dbfile /var/lib/squidguard/db/violence/urls.db
2012-05-27 17:24:26 [2391] init domainlist /var/lib/squidguard/db/warez/domains
2012-05-27 17:24:26 [2391] loading dbfile /var/lib/squidguard/db/warez/domains.db
2012-05-27 17:24:26 [2393] init domainlist /var/lib/squidguard/db/sex/education/domains
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/sex/education/domains.db
2012-05-27 17:24:26 [2393] init urllist /var/lib/squidguard/db/sex/education/urls
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/sex/education/urls.db
2012-05-27 17:24:26 [2392] init urllist /var/lib/squidguard/db/sex/education/urls
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/sex/education/urls.db
2012-05-27 17:24:26 [2392] init domainlist /var/lib/squidguard/db/violence/domains
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/violence/domains.db
2012-05-27 17:24:26 [2394] init urllist /var/lib/squidguard/db/sex/education/urls
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/sex/education/urls.db
2012-05-27 17:24:26 [2394] init domainlist /var/lib/squidguard/db/violence/domains
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/violence/domains.db
2012-05-27 17:24:26 [2390] init urllist /var/lib/squidguard/db/warez/urls
2012-05-27 17:24:26 [2390] loading dbfile /var/lib/squidguard/db/warez/urls.db
2012-05-27 17:24:26 [2390] init domainlist /var/lib/squidguard/db/webradio/domains
2012-05-27 17:24:26 [2390] loading dbfile /var/lib/squidguard/db/webradio/domains.db
2012-05-27 17:24:26 [2391] init urllist /var/lib/squidguard/db/warez/urls
2012-05-27 17:24:26 [2391] loading dbfile /var/lib/squidguard/db/warez/urls.db
2012-05-27 17:24:26 [2391] init domainlist /var/lib/squidguard/db/webradio/domains
2012-05-27 17:24:26 [2391] loading dbfile /var/lib/squidguard/db/webradio/domains.db
2012-05-27 17:24:26 [2393] init domainlist /var/lib/squidguard/db/violence/domains
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/violence/domains.db
2012-05-27 17:24:26 [2393] init urllist /var/lib/squidguard/db/violence/urls
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/violence/urls.db
2012-05-27 17:24:26 [2393] init domainlist /var/lib/squidguard/db/warez/domains
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/warez/domains.db
2012-05-27 17:24:26 [2392] init urllist /var/lib/squidguard/db/violence/urls
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/violence/urls.db
2012-05-27 17:24:26 [2392] init domainlist /var/lib/squidguard/db/warez/domains
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/warez/domains.db
2012-05-27 17:24:26 [2392] init urllist /var/lib/squidguard/db/warez/urls
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/warez/urls.db
2012-05-27 17:24:26 [2394] init urllist /var/lib/squidguard/db/violence/urls
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/violence/urls.db
2012-05-27 17:24:26 [2394] init domainlist /var/lib/squidguard/db/warez/domains
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/warez/domains.db
2012-05-27 17:24:26 [2391] init urllist /var/lib/squidguard/db/webradio/urls
2012-05-27 17:24:26 [2391] loading dbfile /var/lib/squidguard/db/webradio/urls.db
2012-05-27 17:24:26 [2391] init domainlist /var/lib/squidguard/db/webtv/domains
2012-05-27 17:24:26 [2391] loading dbfile /var/lib/squidguard/db/webtv/domains.db
2012-05-27 17:24:26 [2391] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 17:24:26 [2391] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 17:24:26 [2390] init urllist /var/lib/squidguard/db/webradio/urls
2012-05-27 17:24:26 [2390] loading dbfile /var/lib/squidguard/db/webradio/urls.db
2012-05-27 17:24:26 [2390] init domainlist /var/lib/squidguard/db/webtv/domains
2012-05-27 17:24:26 [2390] loading dbfile /var/lib/squidguard/db/webtv/domains.db
2012-05-27 17:24:26 [2390] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 17:24:26 [2390] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 17:24:26 [2394] init urllist /var/lib/squidguard/db/warez/urls
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/warez/urls.db
2012-05-27 17:24:26 [2394] init domainlist /var/lib/squidguard/db/webradio/domains
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/webradio/domains.db
2012-05-27 17:24:26 [2394] init urllist /var/lib/squidguard/db/webradio/urls
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/webradio/urls.db
2012-05-27 17:24:26 [2393] init urllist /var/lib/squidguard/db/warez/urls
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/warez/urls.db
2012-05-27 17:24:26 [2393] init domainlist /var/lib/squidguard/db/webradio/domains
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/webradio/domains.db
2012-05-27 17:24:26 [2392] init domainlist /var/lib/squidguard/db/webradio/domains
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/webradio/domains.db
2012-05-27 17:24:26 [2392] init urllist /var/lib/squidguard/db/webradio/urls
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/webradio/urls.db
2012-05-27 17:24:26 [2390] squidGuard 1.2.0 started (1338117866.073)
2012-05-27 17:24:26 [2390] recalculating alarm in 23674 seconds
2012-05-27 17:24:26 [2390] squidGuard ready for requests (1338117866.501)
2012-05-27 17:24:26 [2391] squidGuard 1.2.0 started (1338117866.079)
2012-05-27 17:24:26 [2391] recalculating alarm in 23674 seconds
2012-05-27 17:24:26 [2391] squidGuard ready for requests (1338117866.503)
2012-05-27 17:24:26 [2393] init urllist /var/lib/squidguard/db/webradio/urls
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/webradio/urls.db
2012-05-27 17:24:26 [2393] init domainlist /var/lib/squidguard/db/webtv/domains
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/webtv/domains.db
2012-05-27 17:24:26 [2394] init domainlist /var/lib/squidguard/db/webtv/domains
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/webtv/domains.db
2012-05-27 17:24:26 [2394] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 17:24:26 [2394] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 17:24:26 [2392] init domainlist /var/lib/squidguard/db/webtv/domains
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/webtv/domains.db
2012-05-27 17:24:26 [2392] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 17:24:26 [2392] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 17:24:26 [2392] squidGuard 1.2.0 started (1338117866.083)
2012-05-27 17:24:26 [2392] recalculating alarm in 23674 seconds
2012-05-27 17:24:26 [2392] squidGuard ready for requests (1338117866.521)
2012-05-27 17:24:26 [2393] init urllist /var/lib/squidguard/db/webtv/urls
2012-05-27 17:24:26 [2393] loading dbfile /var/lib/squidguard/db/webtv/urls.db
2012-05-27 17:24:26 [2393] squidGuard 1.2.0 started (1338117866.091)
2012-05-27 17:24:26 [2393] recalculating alarm in 23674 seconds
2012-05-27 17:24:26 [2393] squidGuard ready for requests (1338117866.523)
2012-05-27 17:24:26 [2394] squidGuard 1.2.0 started (1338117866.101)
2012-05-27 17:24:26 [2394] recalculating alarm in 23674 seconds
2012-05-27 17:24:26 [2394] squidGuard ready for requests (1338117866.524)

пока жду.. паралельно еще обновление на АРМ ставится. время есть немного

Войдите или зарегистрируйтесь, чтобы ответить.