прокси + ClamAV 0

GNU/Linux, UNIX, Open Source → Программное обеспечение

grisha написал 19 октября 2008 года в 09:51 (61594 просмотра) Ведет себя как мужчина; открыл 34 темы в форуме, оставил 202 комментария на сайте.

Есть сквид, хочу к нему приделать сквидгад. Настройки сквида

http_port 127.0.0.1:3128
visible_hostname localhost
cache_dir ufs /var/spool/squid 900 16 256
maximum_object_size 10000 KB
acl localhost src 127.0.0.1/255.255.255.255
acl all src 0.0.0.0/0.0.0.0
http_access deny !localhost
header_access       From deny all
header_access Referer deny all
header_access Server deny all
header_access User-Agent deny all
header_access WWW-Authenticate deny all
header_access Link deny all
error_directory /usr/share/squid/errors/Russian-1251
access_log /var/log/squid/access.log squid
redirector_bypass on
redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf

Настройки сквидГада

dbhome /var/lib/squidguard/db
logdir /var/log/squid
time workhours {
      weekly mtwhf 08:00 - 16:30
      date *-*-01  08:00 - 16:30
}
src admin {
      ip            127.0.0.1
      user            root user
      within             workhours
}
src me {
      ip            127.0.0.1
      user            root user
      within             workhours
}
dest good {
}
dest local {
}
dest adult {
      domainlist      adult/domains
      urllist            adult/urls
      #redirect       http://admin.foo.bar.no/cgi-bin/squidGuard.cgi?clientaddr=%a+clientname=%n+clientident=%i+srcclass=%#s+targetclass=%t+url=%u
}
dest ads {
      domainlist      ads/domains
      urllist            ads/urls
      expressionlist      ads/expressions
      #redirect       http://admin.foo.bar.no/cgi-bin/squidGuard.cgi?clientaddr=%a+clientname=%n+clientident=%i+srcclass=%#s+targetclass=%t+url=%u
}
dest porn {
      domainlist      porn/domains
      urllist            porn/urls
      expressionlist      porn/expressions
}
dest sexuality {
      domainlist      sexuality/domains
      urllist            sexuality/urls
      #expressionlist      sexuality/expressions
}
acl {
      me {
            pass       !porn !ads !sexuality !adult all
      }
default {
            pass       local none
#            rewrite       dmz
#            redirect http://admin.foo.bar.no/cgi-bin/squidGuard.cgi?clientaddr=%a+clientname=%n+clientident=%i+srcclass=%s+targetclass=%t+url=%u
      }
}

Выполняю

sudo /etc/init.d/squid restart
 * Restarting Squid HTTP proxy squid                                                         [ OK ]

В результате интернета нет (почему?), браузер говорит что прокси отказывает в соединении. Настройки браузера — http_proxy 127.0.0.1 port:3128

Netstat показывает

sudo netstat -nuapt
Активные соединения с интернетом (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State       PID/Program name
tcp        0      0 127.0.0.1:80            0.0.0.0:*               LISTEN      5841/apache2
tcp        0      0 127.0.0.1:631           0.0.0.0:*               LISTEN      5140/cupsd
tcp        0      0 MyIpAddress:45062     63.245.213.32:443       ESTABLISHED 6321/firefox
udp        0      0 0.0.0.0:56223           0.0.0.0:*                           14570/(squid)

Где tcp у сквида?

/var/log/squid/squidGuard.log показывает

2008-10-19 16:43:38 [14839] destblock good missing active content, set inactive
2008-10-19 16:43:38 [14839] destblock local missing active content, set inactive
2008-10-19 16:43:38 [14839] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:38 [14839] /var/lib/squidguard/db/adult/domains: Permission denied
2008-10-19 16:43:38 [14841] destblock good missing active content, set inactive
2008-10-19 16:43:38 [14841] destblock local missing active content, set inactive
2008-10-19 16:43:38 [14841] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:38 [14841] /var/lib/squidguard/db/adult/domains: Permission denied
2008-10-19 16:43:38 [14843] destblock good missing active content, set inactive
2008-10-19 16:43:38 [14843] destblock local missing active content, set inactive
2008-10-19 16:43:38 [14843] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:38 [14843] /var/lib/squidguard/db/adult/domains: Permission denied
2008-10-19 16:43:38 [14844] destblock good missing active content, set inactive
2008-10-19 16:43:38 [14844] destblock local missing active content, set inactive
2008-10-19 16:43:38 [14844] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:38 [14844] /var/lib/squidguard/db/adult/domains: Permission denied
2008-10-19 16:43:38 [14845] destblock good missing active content, set inactive
2008-10-19 16:43:38 [14845] destblock local missing active content, set inactive
2008-10-19 16:43:38 [14845] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:38 [14845] /var/lib/squidguard/db/adult/domains: Permission denied
2008-10-19 16:43:41 [14850] destblock good missing active content, set inactive
2008-10-19 16:43:41 [14850] destblock local missing active content, set inactive
2008-10-19 16:43:41 [14850] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:41 [14850] /var/lib/squidguard/db/adult/domains: Permission denied
2008-10-19 16:43:41 [14851] destblock good missing active content, set inactive
2008-10-19 16:43:41 [14851] destblock local missing active content, set inactive
2008-10-19 16:43:41 [14851] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:41 [14851] /var/lib/squidguard/db/adult/domains: Permission denied
2008-10-19 16:43:41 [14852] destblock good missing active content, set inactive
2008-10-19 16:43:41 [14852] destblock local missing active content, set inactive
2008-10-19 16:43:41 [14852] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:41 [14852] /var/lib/squidguard/db/adult/domains: Permission denied
2008-10-19 16:43:41 [14853] destblock good missing active content, set inactive
2008-10-19 16:43:41 [14853] destblock local missing active content, set inactive
2008-10-19 16:43:41 [14853] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:41 [14853] /var/lib/squidguard/db/adult/domains: Permission denied
2008-10-19 16:43:41 [14854] destblock good missing active content, set inactive
2008-10-19 16:43:41 [14854] destblock local missing active content, set inactive
2008-10-19 16:43:41 [14854] init domainlist /var/lib/squidguard/db/adult/domains
2008-10-19 16:43:41 [14854] /var/lib/squidguard/db/adult/domains: Permission denied

ls -lF /var/lib/squidguard/db/adult/domains
-rw-r--r-- 1 root user 15780988 2008-10-19 13:58 /var/lib/squidguard/db/adult/domains

В результате не получается запустить Гада, плюс сквид перестал работать.