Здравствуйте. Имею шлюз
eth0 192.168.1.5 (смотрит в мир)
eth1 192.168.2.1 (внутренняя сеть)
Поднят непрозрачный squid.
В внутренней сети поднят apache, на котором висит внутренний сайт (ip 192.168.2.101) .
В файле hosts он забит как
lib.adm 192.168.2.101
До того как поднял iptables, сайт прекрасно отображался.
iptables политики по умолчанию DROP. Резрешен доступ только к 3128(squid)
Весь скрипт не буду приводить - разбросан по файлам.
По моему мнению, основной момент:
### Когда использую такую конфигурацию - lib.adm не открывается
iptables -A INPUT -i eth1 -p tcp --dport 3128 -j ACCEPT
### Таким образом сайт lib.adm работает
iptables -A INPUT -i eth1 -p tcp -j ACCEPT
Не могу понять в чем дело - пробел в понимании. Раньше думал что процесс проходит так:
браузер юзера обращается к сквиду -> сквид идет в hosts, если не может разрешить имя - обращается к DNS, разрешает имя, получает ресурс и отдает юзеру.
А сейчас возникает ощущение, что на шлюзе прикрыт какой-то порт и разрешение идет другим образом...
Подскажите куда копать.
LinuxForum.Fans
Iptables + squid2.7 + hosts + internal apache не работает
Автор: kapellan
8 сообщений
2162 просмотров
попробуйте
text
iptables -I INPUT -i eth0 -p tcp/udp --dport 53 -j ACCEPTпопробуйте
iptables -I INPUT -i eth0 -p tcp/udp --dport 53 -j ACCEPT
Та же ситуация.
squid выдает
ERROR
The requested URL could not be retrieved
The following error was encountered while trying to retrieve the URL: http://lib.adm/
Connection to 192.168.2.101 failed.
The system returned: (110) Connection timed out
The remote host or network may be down. Please try the request again.
Your cache administrator is webmaster.
Generated Fri, 27 Apr 2012 13:02:14 GMT by Helios (squid/2.7.STABLE9)
Не могу понять. Он его резолвит - так как ип его указывает, а подключиться типа не может...
Так почему тогда
iptables -A INPUT -i eth1 -p tcp -j ACCEPT
работает - это ведь подключение к серваку... Блин где-то серьезно недопонимаю...
покажите выводы команд при включенном правиле
iptables -A INPUT -i eth1 -p tcp -j ACCEPT
text
netstat -anlp | grep 80text
netstat -anlp | grep 3128text
netstat -anlp | grep <ip-адрес с которого происходит успешный запрос к сайту>text
root@Helios:/home/titan# netstat -anlp | grep 192.168.2.69
tcp 0 0 192.168.2.1:3128 192.168.2.69:3377 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.69:3375 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.69:3349 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.69:3379 TIME_WAIT - text
root@Helios:/home/titan# netstat -anlp | grep 80
tcp 0 0 192.168.1.5:34413 93.186.229.175:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:51644 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:48870 77.88.210.136:80 TIME_WAIT -
tcp 0 0 192.168.1.5:55672 2.16.109.55:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:36892 77.120.96.78:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:45246 173.194.70.156:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:47975 217.76.192.182:80 TIME_WAIT -
tcp 0 0 192.168.1.5:39790 91.194.251.100:80 TIME_WAIT -
tcp 0 0 192.168.1.5:39115 77.120.118.28:80 ESTABLISHED 1862/(squid)
tcp 1 1 192.168.1.5:41276 50.18.113.152:80 CLOSING -
tcp 0 0 192.168.1.5:32831 91.198.36.14:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:38043 77.120.118.28:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:58834 93.158.134.119:80 ESTABLISHED 1862/(squid)
tcp 223460 0 192.168.1.5:48722 95.211.86.52:80 ESTABLISHED 1862/(squid)
tcp 0 1746 192.168.1.5:60134 64.215.255.122:80 ESTABLISHED 1862/(squid)
tcp 0 620 192.168.1.5:48375 165.225.129.212:80 ESTABLISHED 1862/(squid)
tcp 331935 0 192.168.1.5:52294 46.182.85.224:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:59203 77.68.58.159:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:59210 46.137.177.84:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:55857 173.194.35.152:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:45620 62.149.12.31:80 TIME_WAIT -
tcp 0 0 192.168.1.5:48956 77.120.118.28:80 TIME_WAIT -
tcp 0 1 192.168.2.1:58880 192.168.2.81:58167 SYN_SENT 1862/(squid)
tcp 0 0 192.168.1.5:52757 87.240.134.3:80 TIME_WAIT -
tcp 0 0 192.168.1.5:43199 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:38441 173.194.70.157:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:47348 87.240.131.98:80 TIME_WAIT -
tcp 0 0 192.168.1.5:36044 87.240.131.104:80 TIME_WAIT -
tcp 0 0 192.168.1.5:43059 77.120.118.28:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:51951 173.194.78.102:80 ESTABLISHED 1862/(squid)
tcp 51600 0 192.168.1.5:56404 88.208.52.191:80 ESTABLISHED 1862/(squid)
tcp 309 0 192.168.1.5:59295 80.239.148.11:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:52072 159.253.149.14:80 TIME_WAIT -
tcp 189701 0 192.168.1.5:42102 78.140.171.206:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:59230 93.158.134.119:80 TIME_WAIT -
tcp 0 0 192.168.1.5:46231 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:34273 173.194.35.159:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:48715 165.225.129.212:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:48296 217.76.192.182:80 TIME_WAIT -
tcp 0 0 192.168.1.5:40974 80.239.230.184:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:57554 87.240.141.217:80 TIME_WAIT -
tcp 224926 0 192.168.1.5:38781 46.182.85.183:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:46803 87.240.131.236:80 TIME_WAIT -
tcp 0 0 192.168.1.5:42534 77.88.252.67:80 TIME_WAIT -
tcp 0 0 192.168.1.5:38580 50.18.113.158:80 TIME_WAIT -
tcp 0 0 192.168.1.5:45732 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:35522 94.100.184.104:80 TIME_WAIT -
tcp 0 0 192.168.1.5:54665 87.240.134.88:80 TIME_WAIT -
tcp 400207 0 192.168.1.5:39371 77.120.118.177:80 ESTABLISHED 1862/(squid)
tcp 0 1 192.168.1.5:59378 77.120.96.78:80 FIN_WAIT1 -
tcp 0 0 192.168.1.5:49189 91.220.161.120:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:49597 77.120.118.180:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:50455 77.120.118.180:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.5:2804 TIME_WAIT -
tcp 0 0 192.168.1.5:50784 87.240.180.203:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:46157 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:59229 217.76.192.182:80 TIME_WAIT -
tcp 0 0 192.168.1.5:47879 217.69.129.91:80 ESTABLISHED 1862/(squid)
tcp 0 620 192.168.1.5:50722 165.225.129.212:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:60615 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:59571 217.69.129.182:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:51242 87.240.131.236:80 TIME_WAIT -
tcp 0 0 192.168.1.5:44733 173.194.35.144:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:35736 195.214.192.28:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:53776 87.240.131.101:80 TIME_WAIT -
tcp 0 0 192.168.1.5:38836 87.240.180.203:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:33422 77.120.118.28:80 TIME_WAIT -
tcp 0 0 192.168.1.5:46800 81.19.88.62:80 TIME_WAIT -
tcp 0 0 192.168.1.5:53414 81.222.128.22:80 TIME_WAIT -
tcp 0 0 192.168.1.5:50691 87.240.141.217:80 TIME_WAIT -
tcp 0 0 192.168.1.5:34154 213.180.193.119:80 TIME_WAIT -
tcp 0 0 192.168.1.5:36053 195.95.206.17:80 ESTABLISHED 1862/(squid)
tcp 0 1 192.168.1.5:52127 65.52.228.34:80 FIN_WAIT1 -
tcp 0 0 192.168.1.5:48150 87.240.141.53:80 TIME_WAIT -
tcp 0 0 192.168.1.5:35450 87.240.142.35:80 TIME_WAIT -
tcp 0 0 192.168.1.5:35404 77.120.118.28:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:34089 87.240.142.125:80 TIME_WAIT -
tcp 0 0 192.168.1.5:41758 88.212.196.77:80 TIME_WAIT -
tcp 0 0 192.168.1.5:56666 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.5:2808 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:37950 80.239.230.169:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:34943 195.214.192.27:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:38663 87.240.142.125:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:35001 213.186.120.50:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:50324 213.171.196.55:80 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.5:2800 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:43523 77.120.118.28:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:58813 87.240.180.203:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:60719 87.240.131.100:80 TIME_WAIT -
tcp 0 0 192.168.1.5:58225 77.88.21.11:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:54008 77.120.118.28:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:37702 77.120.118.28:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:49428 31.12.68.205:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:55285 173.194.70.154:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:57338 62.149.12.31:80 TIME_WAIT -
tcp 0 0 192.168.1.5:57911 195.214.192.28:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:37695 87.240.185.106:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:50245 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:43176 173.194.35.142:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:43611 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:45668 2.16.109.55:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:41795 87.240.134.168:80 TIME_WAIT -
tcp 0 1 192.168.1.5:40480 165.225.129.212:80 SYN_SENT 1862/(squid)
tcp 0 0 192.168.1.5:49191 50.16.240.184:80 ESTABLISHED 1862/(squid)
tcp 135261 0 192.168.1.5:40162 173.194.6.241:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:46772 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:34475 173.194.35.152:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:35055 217.76.192.182:80 TIME_WAIT -
tcp 0 0 192.168.1.5:40045 173.194.70.156:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:37176 91.194.251.70:80 TIME_WAIT -
tcp 0 0 192.168.1.5:41721 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:47555 87.240.180.203:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:36969 213.180.193.25:443 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:35119 62.149.24.150:80 ESTABLISHED 1862/(squid)
tcp 0 1 192.168.1.5:60576 217.73.200.219:80 LAST_ACK -
tcp 0 0 192.168.1.5:54318 77.120.118.180:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:49435 87.240.134.168:80 TIME_WAIT -
tcp 0 0 192.168.1.5:40744 173.194.35.133:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:55108 87.240.139.69:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:46596 62.149.24.150:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:54132 69.171.224.53:80 TIME_WAIT -
tcp 0 0 192.168.1.5:50378 217.16.18.207:80 TIME_WAIT -
tcp 0 0 192.168.1.5:46071 87.240.181.242:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:44356 87.240.131.99:80 TIME_WAIT -
tcp 0 0 192.168.1.5:33816 173.194.78.101:80 TIME_WAIT -
tcp 0 0 192.168.1.5:44659 77.221.132.138:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:48123 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:52844 87.240.134.168:80 TIME_WAIT -
tcp 0 0 192.168.1.5:40157 173.194.35.151:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3880 TIME_WAIT -
tcp 0 1 192.168.2.1:49025 192.168.2.101:80 SYN_SENT 1862/(squid)
tcp 0 0 192.168.1.5:33374 46.137.177.84:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:45651 91.218.212.165:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:33580 46.137.177.84:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:44543 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:47016 173.194.78.102:80 TIME_WAIT -
tcp 0 0 192.168.1.5:52280 62.149.12.31:80 TIME_WAIT -
tcp 0 0 192.168.1.5:40283 87.240.187.175:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:45950 87.240.131.102:80 TIME_WAIT -
tcp 0 0 192.168.1.5:33746 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:34612 67.228.50.142:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:33865 62.149.12.31:80 TIME_WAIT -
tcp 0 0 192.168.1.5:54743 31.28.167.145:80 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.62:49480 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:44311 173.194.70.155:80 ESTABLISHED 16504/firefox-bin
tcp 0 1 192.168.1.5:52881 91.199.144.11:80 FIN_WAIT1 -
tcp 0 0 192.168.1.5:33173 173.194.78.102:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:43788 195.214.192.27:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:48326 77.88.252.106:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:55854 93.158.134.11:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:40685 173.194.35.128:80 TIME_WAIT -
tcp 0 0 192.168.1.5:57369 87.250.250.119:80 TIME_WAIT -
tcp 0 0 192.168.1.5:37494 87.240.134.179:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:41367 77.88.252.67:80 TIME_WAIT -
tcp 0 0 192.168.1.5:33343 80.239.230.170:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:38157 87.240.190.249:80 ESTABLISHED 1862/(squid)
tcp 0 1 192.168.1.5:43218 165.225.129.212:80 SYN_SENT 1862/(squid)
tcp 0 1 192.168.1.5:44668 217.16.18.206:80 LAST_ACK -
tcp 0 0 192.168.1.5:51502 87.240.142.35:80 TIME_WAIT -
tcp 0 0 192.168.1.5:56597 195.214.195.109:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:57053 77.120.118.180:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:47217 80.239.230.163:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:51229 80.239.230.155:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:59083 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:60693 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.1.5:38581 93.186.232.26:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:39085 77.120.118.28:80 TIME_WAIT -
tcp 486923 0 192.168.1.5:46689 46.182.85.254:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:38456 173.194.35.132:80 TIME_WAIT -
tcp 0 0 192.168.1.5:59680 213.180.193.119:80 TIME_WAIT -
tcp 0 0 192.168.1.5:55144 87.240.143.81:80 TIME_WAIT -
tcp 0 0 192.168.1.5:50719 2.16.109.55:80 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.1.5:43700 173.194.35.128:80 TIME_WAIT -
tcp 0 0 192.168.1.5:33631 77.221.132.138:80 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.59:2180 CLOSE_WAIT 1862/(squid)
tcp6 0 0 :::80 :::* LISTEN 1563/apache2
unix 2 [ ACC ] STREAM LISTENING 50332 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 2 [ ACC ] STREAM LISTENING 50800 2814/gnome-keyring- /tmp/keyring-n0BFQR/control
unix 2 [ ACC ] STREAM LISTENING 50802 2814/gnome-keyring- /tmp/keyring-n0BFQR/ssh
unix 2 [ ACC ] STREAM LISTENING 50808 2814/gnome-keyring- /tmp/keyring-n0BFQR/pkcs11
unix 2 [ ACC ] STREAM LISTENING 50381 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 2 [ ACC ] STREAM LISTENING 50737 2809/gnome-settings /tmp/orbit-titan/linc-af9-0-356117c386488
unix 2 [ ACC ] STREAM LISTENING 50757 2810/gnome-power-ma /tmp/orbit-titan/linc-afa-0-48028c288d294
unix 2 [ ACC ] STREAM LISTENING 50880 2821/metacity /tmp/orbit-titan/linc-b05-0-5eab849ac7460
unix 3 [ ] STREAM CONNECTED 3810905 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 3810896 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 3810893 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 3810888 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 3746928 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 3746925 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 3746922 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 3746919 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 3383441 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 3383430 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 3383427 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 3383424 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 54142 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51405 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51397 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51384 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51381 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 51378 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 51371 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51367 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51362 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 51361 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 51358 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51330 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51326 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51274 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51272 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51269 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 51266 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 51262 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51259 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51247 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 51244 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 51239 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51232 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51221 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 51218 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 51213 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51204 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 51021 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50981 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50980 2831/gvfs-afc-volum
unix 3 [ ] STREAM CONNECTED 50974 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50968 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50940 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50933 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50932 2809/gnome-settings
unix 3 [ ] STREAM CONNECTED 50929 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 50926 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 50923 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50882 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 50879 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 50874 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50817 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50811 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50810 2809/gnome-settings
unix 3 [ ] STREAM CONNECTED 50789 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50760 2810/gnome-power-ma /tmp/orbit-titan/linc-afa-0-48028c288d294
unix 3 [ ] STREAM CONNECTED 50759 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 50756 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 50750 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50740 2809/gnome-settings /tmp/orbit-titan/linc-af9-0-356117c386488
unix 3 [ ] STREAM CONNECTED 50739 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 50711 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 50710 2809/gnome-settings
unix 3 [ ] STREAM CONNECTED 50651 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50650 2809/gnome-settings
unix 3 [ ] STREAM CONNECTED 50643 2809/gnome-settings
unix 3 [ ] STREAM CONNECTED 50554 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 50551 2804/gconfd-2 /tmp/orbit-titan/linc-af4-0-2e61295a4bf94
unix 3 [ ] STREAM CONNECTED 50546 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 50384 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50383 2804/gconfd-2
unix 3 [ ] STREAM CONNECTED 50343 2801/dbus-daemon @/tmp/dbus-Bcp0miACPp
unix 3 [ ] STREAM CONNECTED 50335 2800/dbus-launch
unix 3 [ ] STREAM CONNECTED 50334 2801/dbus-daemon
unix 3 [ ] STREAM CONNECTED 50333 2801/dbus-daemon
unix 3 [ ] STREAM CONNECTED 50321 2800/dbus-launch
text
root@Helios:/home/titan# netstat -anlp | grep 3128
tcp 0 0 192.168.2.1:3128 192.168.2.46:4075 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.46:4101 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.35:2933 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.81:3709 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4625 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.79:4126 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.104:3009 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.46:4077 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.46:4059 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.14:4411 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3681 LAST_ACK -
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3624 LAST_ACK -
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3685 LAST_ACK -
tcp 0 55601 192.168.2.1:3128 192.168.2.109:2684 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4641 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.81:3404 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:4004 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1444 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2082 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.59:3513 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.46:4081 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4587 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3653 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.52:1456 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.104:3011 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.69:3382 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.21:3984 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.52:1454 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.52:1458 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.49:2916 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.67:3579 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.32:1435 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3952 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1439 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.92:2439 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.54:4560 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.104:3001 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.35:2939 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.35:2899 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.59:2299 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3630 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.58:2738 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.59:2279 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.92:2455 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.46:4019 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.67:3725 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1443 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.92:2443 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4639 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.58:1661 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.81:3711 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4619 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.32:1555 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.46:4083 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.46:4099 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.92:2447 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.35:2925 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.49:2922 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.69:3386 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.117:2094 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.66:54050 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.49:2918 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.92:2453 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.117:2084 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.2:4174 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.81:3705 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4629 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.49:2894 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.54:4536 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.81:3713 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3697 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2104 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.60:4627 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.5:2820 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.5:2818 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.32:1541 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.14:4599 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.117:2078 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.58:1919 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.92:2451 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.54:4564 ESTABLISHED 1862/(squid)
tcp 0 56265 192.168.2.1:3128 192.168.2.109:2706 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4374 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4623 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2056 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.60:4605 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.49:2928 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3628 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2077 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.21:3994 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3636 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.104:3007 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4607 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.104:2902 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3689 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.18:2964 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.49:2924 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2066 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.60:4617 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.35:2941 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.59:2301 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3588 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.59:2295 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.92:2435 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1452 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.5:2808 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4601 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.92:2449 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3687 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.2:4178 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.5:2800 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.54:4574 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1442 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.14:4595 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.62:49497 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3679 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2052 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3661 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.46:4065 TIME_WAIT -
tcp 0 94033 192.168.2.1:3128 192.168.2.118:1886 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.81:3721 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3982 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.62:49491 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3612 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.2:4151 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.2:4180 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.92:2381 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.60:4583 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4593 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3656 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.46:4054 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.54:4570 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1437 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.81:3719 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.66:54060 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.2:4182 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.2:4172 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3990 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.52:1457 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4591 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.117:2062 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2096 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.2:4170 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4633 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.67:3723 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.118:1835 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.54:4550 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.66:54064 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1450 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.92:2445 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3649 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.21:3988 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3670 LAST_ACK -
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3618 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.54:4548 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.59:2249 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3672 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2086 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.21:4010 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.117:2102 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1451 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.21:3980 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.21:3958 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2076 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.49:2926 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4585 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.67:3575 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.32:1547 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3674 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.54:4552 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.2:4176 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3970 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.58:2740 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.2:4166 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1438 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.21:3968 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.49:2908 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.54:4572 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4637 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.5:2795 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.104:3015 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.62:49490 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.49:2920 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.59:2259 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.59:4604 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.109:1146 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:4006 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.32:1539 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1440 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.21:4008 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3998 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.60:4595 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.67:3729 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.104:3013 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3683 LAST_ACK -
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1436 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.67:3727 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3676 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.58:2782 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4611 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.54:4532 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4609 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3626 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.67:3721 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.117:2051 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1453 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.14:4593 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3647 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.60:4635 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.14:4597 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.58:2792 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3992 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.46:3971 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3668 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.117:2092 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.21:3960 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.21:3960 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.109:2730 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.66:54052 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1446 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.49:2898 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.59:2297 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.62:49496 CLOSE_WAIT 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3695 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.52:1455 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.66:54062 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.60:4631 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.52:1448 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.5:2824 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.52:1376 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.5:2826 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:4016 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.2:4184 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.104:2975 ESTABLISHED 1862/(squid)
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3651 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.49:2884 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.109:1148 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3972 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.92:2437 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.62:49495 CLOSE_WAIT 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.66:54055 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.117:2060 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.18:2970 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.117:2070 TIME_WAIT -
tcp 0 1497 192.168.2.1:3128 192.168.2.81:3643 LAST_ACK -
tcp 0 0 192.168.2.1:3128 192.168.2.46:4039 ESTABLISHED 1862/(squid)
tcp 0 0 192.168.2.1:3128 192.168.2.21:3976 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.14:4591 TIME_WAIT -
tcp 0 0 192.168.2.1:3128 192.168.2.32:1545 TIME_WAIT -Так вижу установленное соединение от клиента к проксе:
text
tcp 0 0 192.168.2.1:3128 192.168.2.69:3386 ESTABLISHED 1862/(squid)а вот соединения от прокси к серверу апач или от клиента к серверу апач, миную проксю, я не вижу вовсе!
В grep 80 должно быть что-то типо:
text
tcp 0 0 192.168.2.1:80 192.168.2.69:XXXX TIME_WAIT[или ESTABLISHED]
или
tcp 0 0 127.0.0.1:80 127.0.0.1:XXXX TIME_WAIT[или ESTABLISHED]
Возможно прошло много времени, между запросом к веб сайту и запуском команды netstat...
Повторите еще раз запрос и сразу дайте команду на сервере netstat -anlp | grep 80
и вставляйте логи в спойлеры, так намного читабельнее )
Кто резольвит у клиентов доменное имя сайта?
Возможно следует прописать правило
text
iptables -I INPUT -i eth1 -p tcp --dport 53 -j ACCEPT
iptables -I INPUT -i eth1 -p udp --dport 53 -j ACCEPTчтобы разрешить запрос на резольв доменного имени к серверу со стороны локальнйо сети (eth1), а не интернет как предлагали выше (eth0)...
iptables -I INPUT -i eth1 -p tcp --dport 53 -j ACCEPT
iptables -I INPUT -i eth1 -p udp --dport 53 -j ACCEPT
чтобы разрешить запрос на резольв доменного имени к серверу со стороны локальнйо сети (eth1), а не интернет как предлагали выше (eth0)...
Спасибо, я так и делал)
В общем решил задачку.
Я все правильно представлял:
браузер юзера обращается к сквиду -> сквид идет в hosts, если не может разрешить имя - обращается к DNS, разрешает имя, получает ресурс и отдает юзеру.
Вот в пункте "получает ресурс" он обращается с своего случайного(образно говоря) порта к иному веб серверу на 80-й порт, и соответственно принимает с 80-го порта на свой порт. А так как у меня
iptables -A INPUT -i eth1 -p tcp --dport 3128 -j ACCEPT
то естественно, соединения на все порты кроме 3128 обрубались.
Все решилось
iptables -A INPUT -i eth1 -s 192.168.2.101 -p tcp --sport 80 -j ACCEPT
для конкретного хоста и сервиса
или
iptables -A INPUT -i eth1 -m state --state ESTABLISHED,RELATED -j ACCEPT
для всех соединений инициализированных нашим шлюзом в локальную сеть.
brullek, спасибо, Вы меня натолкнули. Ибо когда
iptables -A INPUT -i eth1 -p tcp --dport 3128 -j ACCEPT
И я делал на серваке
netstat -n | grep 192.168.2.101
он мне выдавал
192.168.2.1:42670 192.168.2.101:80 1862/squid SYN_WAIT
Т.е. посылал запрос на соединение, а ответа не получал(не мог принять).
Всем спасибо.
Ну обычно правило для установленных соеденений:
text
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPTвсегда прописываю, даже не мог подумать, что у вас его небыло )
Войдите или зарегистрируйтесь, чтобы ответить.
