[CentOS-es] Squid Upgrade 3.3.8

2013-08-13 Por tema Federico Don
Buenas,

Necesito su ayuda.

Tengo funcionando un Squid Version 2.6.STABLE21 en un CentOS release 5.5
(Final)

La configuracion de mi squid es la siguiente:

[root@eze1-proxy02 ~]# grep -v ^# /etc/squid/squid.conf | sed -e '/^$/d'
visible_hostname eze1-proxy02
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80# http
acl Safe_ports port 21# ftp
acl Safe_ports port 443# https
acl Safe_ports port 70# gopher
acl Safe_ports port 210# wais
acl Safe_ports port 1025-65535# unregistered ports
acl Safe_ports port 280# http-mgmt
acl Safe_ports port 488# gss-http
acl Safe_ports port 591# filemaker
acl Safe_ports port 777# multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
icp_access allow all
http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
access_log /var/log/squid/access.log squid
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
refresh_pattern ^ftp:144020%10080
refresh_pattern ^gopher:14400%1440
refresh_pattern .020%4320
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
acl sp-download-grant src 172.17.193.25/32 #NOC-14473#
acl sp-download-grant src 172.17.196.7/32 #NOC-14473#
acl sp-download-grant src 172.17.196.30/32 #NOC-?#
acl sp-download-grant src 172.17.196.55/32 #Pablo Resniski#
acl sp-download-grant src 172.17.196.136/32 #Damian Ferrai
acl sp-download-grant src 172.17.193.218/32 #NOC-14473#
acl sp-download-grant src 172.17.193.171/32 #adrian_bosi#
acl sp-download-grant src 172.17.197.148/32 #
acl sp-download-grant src 172.17.198.94/32 #Monitores-NOC
acl sp-download-grant src 172.17.201.63/32 #Fede_git
acl sp-download-grant src 172.17.193.38/32 #request for it-team
acl sp-download-grant src 172.17.193.197/32 #request for it-team
acl sp-download-grant src 172.17.193.6/32 #request for it-team
acl sp-download-grant src 172.17.193.5/32 #request for it-team
acl sp-download-grant src 172.17.193.4/32 #request for it-team
acl sp-download-grant src 172.17.193.7/32 #request for it-team
acl sp-download-grant src 172.17.193.85/32 #request for Mauro
acl sp-download-grant src 172.17.195.42/32 #request for it-team
acl sp-download-grant src 172.17.195.200/32 #request for it-team
acl sp-download-grant src 172.17.195.37/32 #request for it-team
acl sp-download-grant src 172.17.195.38/32 #request for it-team
acl sp-download-grant src 172.17.195.112/32 #request for it-team
acl sp-download-grant src 172.17.195.122/32 #fede for it-team
acl sp-download-grant src 172.17.195.240/32 #request for it-team
acl sp-download-grant src 172.17.195.242/32 #request for it-team
acl sp-download-grant src 172.17.195.67/32 #request for it-team
acl sp-download-grant src 172.17.195.208/32 #request for it-team
acl sp-download-grant src 172.17.193.175/32 #request for damian ferrai
acl sp-download-grant src 172.17.193.230/32 #request for Juan Ferraris
acl sp-download-grant src 172.17.196.26/32 #request for Juan Ferraris
acl sp-download-grant src 172.17.196.25/32 #request for gaston pereyra
acl sp-download-grant src 172.17.201.59/32 #request for fededon
acl sp-download-grant src 172.17.195.24/32 #request for fededon
acl sp-download-grant src 172.17.195.144/32 #request for fededon
acl sp-download-grant src 172.17.195.59/32 #request for fededon
reply_body_max_size 0 allow sp-download-grant
acl downloadhours time D 9:00-18:00
reply_body_max_size 50490 allow downloadhours all
acl allow_url dstdomain /etc/squid/allow_url
http_access allow all allow_url
acl facebook_list src /etc/squid/facebook_allow.squid
acl facebook dstdomain .facebook.com
http_access allow facebook facebook_list
acl WorkingHours time D 09:00-13:00
acl WorkingHours2 time D 14:00-18:00
acl youtube_list src /etc/squid/youtube_allow.squid
acl youtube dstdomain .youtube.com
http_access allow youtube youtube_list
http_access deny youtube WorkingHours all
http_access deny youtube WorkingHours2 all
http_access allow youtube all
acl taringa_list src /etc/squid/taringa_allow.squid
acl taringa dstdomain .taringa.net
http_access allow taringa taringa_list
acl WorkingHours time D 09:00-13:00
acl WorkingHours2 time D 14:00-18:00
acl vimeo_list src /etc/squid/vimeo_allow.squid
acl vimeo dstdomain .vimeo.com
http_access allow vimeo vimeo_list
http_access deny vimeo WorkingHours all
http_access deny vimeo WorkingHours2 all
http_access allow vimeo all
http_access allow all
cache_peer 127.0.0.1 parent 8080 0 no-query no-digest no-netdb-exchange
default
max_filedesc 4096

Ahora bien, quiero pasar a la version Squid Cache: Version 3.3.8 en un
CentOS release 6.4 (Final).

Realize una instalacion nueva en otro host y la configuracion en squid.con
es la siguiente:


Re: [CentOS-es] Squid Upgrade 3.3.8

2013-08-13 Por tema César C .
hola

a mi me pasó esto pero con la version 3.1

lo solucioné colocalndo esto,

 

acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8

 

pruebas y nos comentas.

 

 

saludos
 

 Date: Tue, 13 Aug 2013 12:40:51 -0300
 From: federico.do...@gmail.com
 To: centos-es@centos.org
 Subject: [CentOS-es] Squid Upgrade 3.3.8
 
 Buenas,
 
 Necesito su ayuda.
 
 Tengo funcionando un Squid Version 2.6.STABLE21 en un CentOS release 5.5
 (Final)
 
 La configuracion de mi squid es la siguiente:
 
 [root@eze1-proxy02 ~]# grep -v ^# /etc/squid/squid.conf | sed -e '/^$/d'
 visible_hostname eze1-proxy02
 acl all src 0.0.0.0/0.0.0.0
 acl manager proto cache_object
 acl localhost src 127.0.0.1/255.255.255.255
 acl to_localhost dst 127.0.0.0/8
 acl SSL_ports port 443 563
 acl Safe_ports port 80 # http
 acl Safe_ports port 21 # ftp
 acl Safe_ports port 443 # https
 acl Safe_ports port 70 # gopher
 acl Safe_ports port 210 # wais
 acl Safe_ports port 1025-65535 # unregistered ports
 acl Safe_ports port 280 # http-mgmt
 acl Safe_ports port 488 # gss-http
 acl Safe_ports port 591 # filemaker
 acl Safe_ports port 777 # multiling http
 acl CONNECT method CONNECT
 http_access allow manager localhost
 http_access deny manager
 http_access deny !Safe_ports
 http_access deny CONNECT !SSL_ports
 http_access allow localhost
 icp_access allow all
 http_port 3128 transparent
 hierarchy_stoplist cgi-bin ?
 access_log /var/log/squid/access.log squid
 acl QUERY urlpath_regex cgi-bin \?
 cache deny QUERY
 refresh_pattern ^ftp: 1440 20% 10080
 refresh_pattern ^gopher: 1440 0% 1440
 refresh_pattern . 0 20% 4320
 acl apache rep_header Server ^Apache
 broken_vary_encoding allow apache
 acl sp-download-grant src 172.17.193.25/32 #NOC-14473#
 acl sp-download-grant src 172.17.196.7/32 #NOC-14473#
 acl sp-download-grant src 172.17.196.30/32 #NOC-?#
 acl sp-download-grant src 172.17.196.55/32 #Pablo Resniski#
 acl sp-download-grant src 172.17.196.136/32 #Damian Ferrai
 acl sp-download-grant src 172.17.193.218/32 #NOC-14473#
 acl sp-download-grant src 172.17.193.171/32 #adrian_bosi#
 acl sp-download-grant src 172.17.197.148/32 #
 acl sp-download-grant src 172.17.198.94/32 #Monitores-NOC
 acl sp-download-grant src 172.17.201.63/32 #Fede_git
 acl sp-download-grant src 172.17.193.38/32 #request for it-team
 acl sp-download-grant src 172.17.193.197/32 #request for it-team
 acl sp-download-grant src 172.17.193.6/32 #request for it-team
 acl sp-download-grant src 172.17.193.5/32 #request for it-team
 acl sp-download-grant src 172.17.193.4/32 #request for it-team
 acl sp-download-grant src 172.17.193.7/32 #request for it-team
 acl sp-download-grant src 172.17.193.85/32 #request for Mauro
 acl sp-download-grant src 172.17.195.42/32 #request for it-team
 acl sp-download-grant src 172.17.195.200/32 #request for it-team
 acl sp-download-grant src 172.17.195.37/32 #request for it-team
 acl sp-download-grant src 172.17.195.38/32 #request for it-team
 acl sp-download-grant src 172.17.195.112/32 #request for it-team
 acl sp-download-grant src 172.17.195.122/32 #fede for it-team
 acl sp-download-grant src 172.17.195.240/32 #request for it-team
 acl sp-download-grant src 172.17.195.242/32 #request for it-team
 acl sp-download-grant src 172.17.195.67/32 #request for it-team
 acl sp-download-grant src 172.17.195.208/32 #request for it-team
 acl sp-download-grant src 172.17.193.175/32 #request for damian ferrai
 acl sp-download-grant src 172.17.193.230/32 #request for Juan Ferraris
 acl sp-download-grant src 172.17.196.26/32 #request for Juan Ferraris
 acl sp-download-grant src 172.17.196.25/32 #request for gaston pereyra
 acl sp-download-grant src 172.17.201.59/32 #request for fededon
 acl sp-download-grant src 172.17.195.24/32 #request for fededon
 acl sp-download-grant src 172.17.195.144/32 #request for fededon
 acl sp-download-grant src 172.17.195.59/32 #request for fededon
 reply_body_max_size 0 allow sp-download-grant
 acl downloadhours time D 9:00-18:00
 reply_body_max_size 50490 allow downloadhours all
 acl allow_url dstdomain /etc/squid/allow_url
 http_access allow all allow_url
 acl facebook_list src /etc/squid/facebook_allow.squid
 acl facebook dstdomain .facebook.com
 http_access allow facebook facebook_list
 acl WorkingHours time D 09:00-13:00
 acl WorkingHours2 time D 14:00-18:00
 acl youtube_list src /etc/squid/youtube_allow.squid
 acl youtube dstdomain .youtube.com
 http_access allow youtube youtube_list
 http_access deny youtube WorkingHours all
 http_access deny youtube WorkingHours2 all
 http_access allow youtube all
 acl taringa_list src /etc/squid/taringa_allow.squid
 acl taringa dstdomain .taringa.net
 http_access allow taringa taringa_list
 acl WorkingHours time D 09:00-13:00
 acl WorkingHours2 time D 14:00-18:00
 acl vimeo_list src /etc/squid/vimeo_allow.squid
 acl vimeo dstdomain .vimeo.com
 http_access allow vimeo vimeo_list
 http_access deny vimeo WorkingHours all
 http_access deny vimeo WorkingHours2 all
 http_access allow