Camelia Nastase wrote: >> Salut, >> >> Incerc sa configurez doua squid-uri (3.0.STABLE8, pe debian 5.0.3) sa se >> vada ca sibling-uri (192.168.1.1 si 192.168.3.1). cache-digest-ul se >> transfera de la unul la celalalt, vad in loguri linii de genul >> UDP_MISS/000 107 ICP_QUERY http://www.blablabla.tld - NONE/- - >> dat in cachemgr si in cache.log amandoua insista sa il declare dead pe >> celalalt. >> >> Am sapat pe gogu dar nu prea imi dau seama cum sa-i dau de cap. >> >> Merci de orice idee. >> >> Configuratia este mai jos si este identica pe cele doua servere (mai >> putin cache_peer-ul, desigur): >> >> acl SSL_ports port 443 # https >> acl SSL_ports port 563 # snews >> acl SSL_ports port 873 # rsync >> acl Safe_ports port 80 # http >> acl Safe_ports port 21 # ftp >> acl Safe_ports port 443 # https >> acl Safe_ports port 70 # gopher >> acl Safe_ports port 210 # wais >> acl Safe_ports port 1025-65535 # unregistered ports >> acl Safe_ports port 280 # http-mgmt >> acl Safe_ports port 488 # gss-http >> acl Safe_ports port 591 # filemaker >> acl Safe_ports port 777 # multiling http >> acl Safe_ports port 631 # cups >> acl Safe_ports port 873 # rsync >> acl Safe_ports port 901 # SWAT >> acl manager proto cache_object >> acl localhost src 127.0.0.0/8 >> acl to_localhost dst 127.0.0.0/8 >> acl localnet src 10.0.0.0/8 >> acl localnet src 172.16.0.0/12 >> acl localnet src 192.168.0.0/16 >> acl purge method PURGE >> acl CONNECT method CONNECT >> acl QUERY urlpath_regex cgi-bin \? >> >> http_access allow manager localhost >> http_access deny manager >> http_access deny !Safe_ports >> http_access deny CONNECT !SSL_ports >> http_access allow localnet to_localhost >> http_access allow localhost to_localhost >> http_access deny to_localhost >> http_access allow localnet >> http_access allow localhost >> http_access deny all >> icp_access allow localnet >> htcp_access allow localnet >> icp_access deny all >> htcp_access deny all >> >> http_port 3128 transparent >> hierarchy_stoplist cgi-bin ? >> cache deny QUERY >> >> cache_mem 256 MB >> maximum_object_size_in_memory 32 KB >> cache_dir ufs /var/spool/squid3 10240 16 256 >> maximum_object_size 64 MB >> >> access_log /var/log/squid3/access.log squid >> cache_log /var/log/squid3/cache.log >> cache_store_log none >> logfile_rotate 0 >> mime_table /usr/share/squid3/mime.conf >> pid_filename /var/run/squid3.pid >> >> refresh_pattern ^ftp: 1440 20% 10080 >> refresh_pattern ^gopher: 1440 0% 1440 >> refresh_pattern (cgi-bin|\?) 0 0% 0 >> refresh_pattern (Release|Package(.gz)*)$ 0 20% 2880 >> refresh_pattern . 0 20% 4320 >> negative_ttl 60 seconds >> shutdown_lifetime 15 seconds >> >> icp_port 3130 >> htcp_port 4827 >> >> error_directory /usr/share/squid3/errors/Romanian >> email_err_data on >> forwarded_for on >> coredump_dir none >> >> redirect_program /usr/bin/squidGuard -c /etc/squid/squidGuard.conf >> url_rewrite_children 5 >> url_rewrite_concurrency 0 >> >> cache_peer 192.168.1.1 sibling 3128 3130 >> >> >> > > > Incearca sa scoti linia de htcp_access deny all. > > > O zi buna, > Camelia > Am incercat cu icp_access allow all si htcp_access allow all pe ambele masini (dupa ce am sters restul de icp_access si htcp_access) si am acelasi rezultat
_______________________________________________ RLUG mailing list RLUG@lists.lug.ro http://lists.lug.ro/mailman/listinfo/rlug
