Newsgroup: it.comp.os.linux.software
Titolo: Squid: aiuto

ciao a tutti,
mi date una mano a capire perchè non mi funziona squid in transparent mode?
nella classica modalità classica funziona (settando il browser dei client)
ma in transparent
proprio no! sembra che il pc faccia solo routing, ossia rigira solo il
traffico verso il router
vi posto la config e aiutatemi grazie!!!
http_port 3131
#mcast_groups none
#cache_mem 80 MB
#cache_swap_low 90
#cache_swap_high 95
#maximum_object_size 8000 KB
#minimum_object_size 0 KB
#maximum_object_size_in_memory 800 KB
#ipcache_size 1024
#ipcache_low 90
#ipcache_high 95
#fqdncache_size 1024
#cache_replacement_policy lru
#memory_replacement_policy lru
cache_dir ufs /var/spool/squid 80 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
cache_swap_log /var/log/squid/swap.log
#emulate_httpd_log off
#log_ip_on_direct on
#mime_table /etc/squid/mime.conf
#log_mime_hdrs off
#pid_filename /var/run/squid.pid
#debug_options ALL,1
#log_fqdn off
client_netmask 255.255.255.255
# ftp_user Squid@
# ftp_list_width 32
# ftp_passive on
# cache_dns_program /usr/lib/squid/
dns_nameservers 127.0.0.1
#request_header_max_size 10 KB
#request_body_max_size 0 KB
#reply_body_max_size 0
#quick_abort_min 16 KB
#quick_abort_max 16 KB
#quick_abort_pct 95
#negative_ttl 5 minutes
#positive_dns_ttl 6 hours
#negative_dns_ttl 5 minutes
#connect_timeout 2 minutes
#peer_connect_timeout 30 seconds
#siteselect_timeout 4 seconds
#read_timeout 15 minutes
#request_timeout 30 seconds
#client_lifetime 500 minutes
#half_closed_clients on
#pconn_timeout 90 seconds
#ident_timeout 10 seconds
acl all src 
0.0.0.0/0.0.0.0
#acl manager proto cache_object
#acl localhost src 
127.0.0.1/255.255.255.255
#acl SSL_ports port 443 563
#acl Safe_ports port 80 # http
#acl Safe_ports port 21 # ftp
#acl Safe_ports port 443 563 # https, snews
#acl Safe_ports port 70 # gopher
#acl Safe_ports port 210 # wais
#acl Safe_ports port 1025-65535 # unregistered ports
#acl Safe_ports port 280 # http-mgmt
#acl Safe_ports port 488 # gss-http
#acl Safe_ports port 591 # filemaker
#acl Safe_ports port 777 # multiling http
#acl CONNECT method CONNECT
http_access allow all
#http_access allow manager localhost
#http_access deny manager
#icp_access deny all
 cache_effective_user squid
 cache_effective_group squid
#announce_period 0
httpd_accel_host virtual
httpd_accel_port 0
httpd_accel_single_host off
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
#logfile_rotate 0
#tcp_recv_bufsize 0 bytes
#memory_pools off
#forwarded_for off
#log_icp_queries off
#icp_hit_stale off
#store_avg_object_size 50 KB
#store_objects_per_bucket 50
#client_db on
#query_icmp off
#test_reachability off
#buffered_logs off
#reload_into_ims off
#minimum_retry_timeout 5 seconds
#maximum_single_addr_tries 3
#snmp_port 0
#snmp_access deny all
#nonhierarchical_direct on
#prefer_direct off
#strip_query_terms on
#redirector_bypass off
#ignore_unknown_nameservers off
#client_persistent_connections on
#server_persistent_connections on
#pipeline_prefetch on
ie_refresh on

 vi posto la config e aiutatemi grazie!!!
[...]
A naso la configurazione parrebbe a posto (salvo un fatto: non usare
ufs ma aufs o diskd per le cache_dir).
A iptables come stai messo?
-- 
	kinkie (kinkie chiocciola tiscalinet punto it)
	E ora, qualche parola dai nostri sponsor:
HOW YOU CAN TELL THAT IT'S GOING TO BE A ROTTEN DAY:
	#32: You call your answering service and they've never heard of you.

 ha scritto nel messaggio
news:m3u1d8z...@gamera.kinkie.it...


 è corretto vero?
Si`, parrebbe tutto a posto.
Il che mi lascia in dubbio sul perche` non funzioni..
(un piccolo difetto della configurazione: manca memory_pools_limit)
-- 
	kinkie (kinkie chiocciola tiscalinet punto it)
	E ora, qualche parola dai nostri sponsor:
We place two copies of PEOPLE magazine in a DARK, HUMID mobile home.
45 minutes later CYNDI LAUPER emerges wearing a BIRD CAGE on her head!