squid капризничает :)

Проблемы установки, настройки и работы Правильной Операционной Системы

Модератор: terminus

Правила форума
Убедительная просьба юзать теги [cоde] при оформлении листингов.
Сообщения не оформленные должным образом имеют все шансы быть незамеченными.
Аватара пользователя
f0s
ст. лейтенант
Сообщения: 1082
Зарегистрирован: 2007-03-13 18:43:31
Откуда: Санкт-Петербург
Контактная информация:

squid капризничает :)

Непрочитанное сообщение f0s » 2007-11-30 10:47:16

вот столкнулся с такой проблемой.. настроил я где-то месяц назад роутер под

Код: Выделить всё

[f0s@router] /home/f0s/> uname -a
FreeBSD router.artpaint 6.2-RELEASE-p7 FreeBSD 6.2-RELEASE-p7 #0: Mon Sep 24 11:27:09 MSD 2007     root@router.artpaint:/usr/obj/usr/src/sys/router.kern-2007-24-09  amd64
поставил туды
Squid Cache: Version 2.6.STABLE16+ICAP
c_icap какой-то собрал из исходников
rejik-3.2.1_1
остальное в принципе к вопросу не относится я думаю... =) в общем все классное работало, режик работал отлично, и даже c-icap работал =)

но вот вчероа решил вернуться к настройке/проверке все этого дела, чтобы окончательно всех перевести на новый сервер. чуть подправил конфиг, зменил параметр отвечающий за размер кеша на диске.. сдеал чуток поменьше :), далее зашел в папку

Код: Выделить всё

# cd /usr/local/squid/cache
# rm -r  *
# squid -z
затем подключил проводок инета.. и... попробовал с клиентской тачки сначала ping mail.ru И т.п. - пинги идут - ок, ipfw все пропускает :) далее в инет. инет тока через сквид, фаером для клиентов все закрыто. подключаемся в инет, через непрозрачный прокси (у меня т.к. авторизация из самба домена). сначала выдало ошибку c-icap.. ладно.. некогда разбираться с icap-ом, отрубил его в конфиге сквидпа, временно поставил off, пробую снова, пишет:
ОШИБКА
Запрошенный URL не может быть доставлен.

Во время доставки URL: http://www.mozilla-russia.org/products/seamonkey/

Произошла следующая ошибка:

* Не удалось установить соединение.

Был получен ответ:

(13) Permission denied

Удалённый сервер либо сеть не отвечают. Пожалуйста, повторите запрос.

Generated Thu, 29 Nov 2007 15:40:55 GMT by artpaint.spb.ru (squid/2.6.STABLE16+ICAP)
в это время в логах сквида:

Код: Выделить всё

1196350855.127      0 192.168.10.2 TCP_DENIED/407 1828 GET http://www.mozilla-russia.org/products/seamonkey/ - NONE/- text/html
1196350855.140      0 192.168.10.2 TCP_DENIED/407 1995 GET http://www.mozilla-russia.org/products/seamonkey/ - NONE/- text/html
1196350855.355    215 192.168.10.2 TCP_MISS/503 1385 GET http://www.mozilla-russia.org/products/seamonkey/ admin DIRECT/- text/html
то есть выходит - первые две строчки (ошибка 407) - это он не пускает (т.к. proxy_auth REQUIRED), и т.к. на тот момент еще юзер не авторизрован, третья строчка мы видим он авторизует админа, но уже выдает TCP_MISS. я погуглил в яндексе нашел это:
TCP_MISS

Запрошенного объекта не было в кеше.
вот еще лог:


в общем не понятно в чем дело.. кеш я новый создавал.. но если не может найти, так чего не загружает? вот еще немного инфы:

это права на папки:

Код: Выделить всё

[f0s@router] /usr/local/> ll | grep squid
drwxrwx---   5 squid  squid   512  1 окт 18:33 rejik
drwxr-xr-x   4 squid  squid   512 18 сен 18:46 squid

Код: Выделить всё

[f0s@router] /usr/local/> cd squid/
[f0s@router] /usr/local/squid/> ll
total 4
drwxr-x---  66 squid  squid  1024 29 ноя 18:40 cache
drwxr-x---   2 squid  squid   512 11 окт 09:51 logs
[f0s@router] /usr/local/squid/> cd cache/
[f0s@router] /usr/local/squid/cache/> ll
total 10482
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 00
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 01
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 02
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 03
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 04
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 05
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 06
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 07
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 08
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 09
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 0A
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 0B
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 0C
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 0D
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 0E
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 0F
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 10
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 11
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 12
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 13
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 14
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 15
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 16
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 17
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 18
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 19
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 1A
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 1B
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 1C
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 1D
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 1E
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 1F
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 20
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 21
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 22
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 23
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 24
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 25
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 26
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 27
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 28
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 29
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 2A
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 2B
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 2C
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 2D
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 2E
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 2F
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 30
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 31
drwxr-x---  514 squid  squid      6656 29 ноя 17:19 32
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 33
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 34
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 35
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 36
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 37
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 38
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 39
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 3A
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 3B
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 3C
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 3D
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 3E
drwxr-x---  514 squid  squid      6656 29 ноя 17:20 3F
-rw-------    1 squid  squid  10186752 29 ноя 17:50 squid.core
-rw-r-----    1 squid  squid        72 29 ноя 18:40 swap.state
[f0s@router] /usr/local/squid/cache/>
это права на использование winbindd:

Код: Выделить всё

[f0s@router] /var/db/samba/> cd winbindd_privileged/
[f0s@router] /var/db/samba/winbindd_privileged/> ll
total 0
srwxrwxrwx  1 root  squid  0 29 ноя 18:38 pipe
[f0s@router] /var/db/samba/winbindd_privileged/>
результаты работы wbinfo:

Код: Выделить всё

[f0s@router] /usr/local/etc/squid/> wbinfo -t
checking the trust secret via RPC calls succeeded
[f0s@router] /usr/local/etc/squid/> wbinfo -u f0s
admin
zainutdinova
gileva
yatskaya
talanov
zdorov_sa
kralina
fedoseeva
talanova
shaplyko
titova
sedova
zdorov_ka
rudakova
lizovskaya
lavrova
belyakova
peredelka
zdorov_ai
ivanova
pakulina
lukov
palkin
gelrod
andreeva
rusakova
karlova
kolyada
shel
tihonova
smirnova
elutin
rarova
pinizhaninova
shashkova
ovchinnikov
zaycev
rodionova
f0s
vinogradov
kochetkova
knm
vladimirova
sherbatey
suchkova
popova
yakunina
karzina
gerasimova
kolomashnikova
mssql
rtischeva
dobronravova
yakovleva
[f0s@router] /usr/local/etc/squid/> wbinfo -g
BUILTIN+administrators
BUILTIN+users
admins
it
export
reklama
marketing
finance
personal
sales-kanc
sales-hudozh
buh
sklad
zakupki
magazin
administration
users
computers
spb
msk
[f0s@router] /usr/local/etc/squid/>

конфиг сквида:

Код: Выделить всё

http_port 8787
icp_port 0
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mem 256 MB
maximum_object_size 16184 KB
maximum_object_size_in_memory 1024 KB
cache_dir ufs /usr/local/squid/cache 15000 64 512
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
cache_store_log none
ftp_user abuse@artpaint.spb.ru
hosts_file /etc/hosts
#
# это для доменных:
auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 30
auth_param ntlm keep_alive on
# Это для всех остальных
auth_param basic program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm router.artpaint
auth_param basic credentialsttl 2 hour
auth_param basic casesensitive off

refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320


redirect_program /usr/local/rejik/redirector
redirect_children 15


#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.0/8
acl our_network src 192.168.10.0/24
#
acl SSL_ports port 443
#
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 22          # ssh
acl Safe_ports port 3389        # RDP
acl Safe_ports port 5190        # icq
#
acl CONNECT method CONNECT

#
acl DomainUsers proxy_auth REQUIRED
http_access allow DomainUsers

http_access deny !Safe_ports
http_access deny all
http_reply_access allow all
tcp_outgoing_address 84.52.64.20
cache_mgr admin@artpaint.spb.ru
cache_effective_user squid
cache_effective_group squid
visible_hostname artpaint.spb.ru
#
icap_enable off
icap_preview_enable off
icap_preview_size 128
icap_send_client_ip on
icap_service  service_avi_req reqmod_precache 0 icap://localhost:1344/srv_clamav
icap_service  service_avi respmod_precache 1 icap://localhost:1344/srv_clamav
icap_class    class_antivirus service_avi service_avi_req
icap_access   class_antivirus allow all

error_directory /usr/local/etc/squid/errors/Russian-1251
coredump_dir /usr/local/squid/cache
named, named, what is my TTL value?..

[FidoNet 2:550/2 && 2:5030/4441]

Хостинговая компания Host-Food.ru
Хостинг HostFood.ru
 

Услуги хостинговой компании Host-Food.ru

Хостинг HostFood.ru

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2460 рублей (8 CPU, 8Gb RAM, 2x500Gb HDD, RAID 3ware 9750):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

Аватара пользователя
f0s
ст. лейтенант
Сообщения: 1082
Зарегистрирован: 2007-03-13 18:43:31
Откуда: Санкт-Петербург
Контактная информация:

Re: squid капризничает :)

Непрочитанное сообщение f0s » 2007-11-30 12:27:11

вот что пишут логи.. логи описывают эти три строчки - первые две - джоступ запрещен (ибо еще не авторизовался), а третья - когджа уже авторизовался - не пускает, пишет что сервер не найден.. не понимаю почему не найден-то.. с этого же роутера нормально все пингуется

Код: Выделить всё

2007/11/30 12:16:02| eventRun: RUN ID 56
2007/11/30 12:16:02| eventRun: Running 'MaintainSwapSpace', id 55
2007/11/30 12:16:02| storeMaintainSwapSpace: f=0.000000, max_scan=100, max_remove=10
2007/11/30 12:16:02| cbdataFree: 0xed6b98
2007/11/30 12:16:02| cbdataFree: Freeing 0xed6b98
2007/11/30 12:16:02| storeUfsDirMaintain: /usr/local/squid/cache removed 0/10 f=0.000 max_scan=100
2007/11/30 12:16:02| comm_select: timeout 1000
2007/11/30 12:16:02| commSetSelect: FD 61 type 1
2007/11/30 12:16:02| fd_open FD 59 HTTP Request
2007/11/30 12:16:02| httpAccept: FD 59: accepted port 8787 client 192.168.10.2:1482
2007/11/30 12:16:02| cbdataLock: 0x767098
2007/11/30 12:16:02| comm_add_close_handler: FD 59, handler=0x41b8f0, data=0xea3618
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| commSetTimeout: FD 59 timeout 300
2007/11/30 12:16:02| aclCheckFast: list: 0x76f0d8
2007/11/30 12:16:02| aclMatchAclList: checking all
2007/11/30 12:16:02| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
2007/11/30 12:16:02| aclMatchIp: '192.168.10.2' found
2007/11/30 12:16:02| aclMatchAclList: returning 1
2007/11/30 12:16:02| commSetSelect: FD 59 type 1
2007/11/30 12:16:02| comm_accept: FD 61: (35) Resource temporarily unavailable
2007/11/30 12:16:02| comm_select: timeout 925
2007/11/30 12:16:02| clientReadRequest: FD 59: reading request...
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| parseHttpRequest: Method is 'GET'
2007/11/30 12:16:02| parseHttpRequest: URI is 'http://www.mail.ru/'
2007/11/30 12:16:02| parseHttpRequest: req_hdr = {Host: www.mail.ru
2007/11/30 12:16:02| parseHttpRequest: end = {}
2007/11/30 12:16:02| parseHttpRequest: prefix_sz = 476, req_line_sz = 34
2007/11/30 12:16:02| parseHttpRequest: Request Header is
2007/11/30 12:16:02| parseHttpRequest: Complete request received
2007/11/30 12:16:02| conn->in.offset = 0
2007/11/30 12:16:02| commSetTimeout: FD 59 timeout 86400
2007/11/30 12:16:02| clientSetKeepaliveFlag: http_ver = 1.1
2007/11/30 12:16:02| clientSetKeepaliveFlag: method = GET
2007/11/30 12:16:02| cbdataLock: 0x76bcd8
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0x76bcd8
2007/11/30 12:16:02| aclCheck: checking 'http_access allow DomainUsers'
2007/11/30 12:16:02| aclMatchAclList: checking DomainUsers
2007/11/30 12:16:02| aclMatchAcl: checking 'acl DomainUsers proxy_auth REQUIRED'
2007/11/30 12:16:02| authenticateValidateUser: Auth_user_request was NULL!
2007/11/30 12:16:02| authenticateAuthenticate: broken auth or no proxy_auth header. Requesting auth header.
2007/11/30 12:16:02| aclMatchAcl: returning 0 sending authentication challenge.
2007/11/30 12:16:02| aclMatchAclList: no match, returning 0
2007/11/30 12:16:02| aclCheck: match found, returning 2
2007/11/30 12:16:02| cbdataUnlock: 0x76bcd8
2007/11/30 12:16:02| aclCheckCallback: answer=2
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| The request GET http://www.mail.ru/ is DENIED, because it matched 'DomainUsers'
2007/11/30 12:16:02| Access Denied: http://www.mail.ru/
2007/11/30 12:16:02| AclMatchedName = DomainUsers
2007/11/30 12:16:02| Proxy Auth Message = <null>
2007/11/30 12:16:02| storeCreateEntry: 'http://www.mail.ru/'
2007/11/30 12:16:02| new_MemObject: returning 0xed7e00
2007/11/30 12:16:02| new_StoreEntry: returning 0xed6e00
2007/11/30 12:16:02| storeKeyPrivate: GET http://www.mail.ru/
2007/11/30 12:16:02| storeHashInsert: Inserting Entry 0xed6e00 key '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeReleaseRequest: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeLockObject: key '365F750C521EF5B1D517D7DC18D65DD3' count=2
2007/11/30 12:16:02| storeClientCopy: 365F750C521EF5B1D517D7DC18D65DD3, seen 0, want 0, size 4096, cb 0x41e680, cbdata 0xee6018
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataLock: 0xed6e98
2007/11/30 12:16:02| storeClientCopy2: 365F750C521EF5B1D517D7DC18D65DD3
2007/11/30 12:16:02| storeClientCopy3: Waiting for more
2007/11/30 12:16:02| cbdataUnlock: 0xed6e98
2007/11/30 12:16:02| storeLockObject: key '365F750C521EF5B1D517D7DC18D65DD3' count=3
2007/11/30 12:16:02| errorConvert: %U --> 'http://www.mail.ru/'
2007/11/30 12:16:02| errorConvert: %U --> 'http://www.mail.ru/'
2007/11/30 12:16:02| errorConvert: %U --> 'http://www.mail.ru/'
2007/11/30 12:16:02| errorConvert: %w --> 'admin@artpaint.spb.ru'
2007/11/30 12:16:02| errorConvert: %h --> 'artpaint.spb.ru'
2007/11/30 12:16:02| errorConvert: %T --> 'Fri, 30 Nov 2007 09:16:02 GMT'
2007/11/30 12:16:02| errorConvert: %h --> 'artpaint.spb.ru'
2007/11/30 12:16:02| errorConvert: %s --> 'squid/2.6.STABLE16+ICAP'
2007/11/30 12:16:02| errorConvert: %S --> '
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 44 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 6 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 23 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 4 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 29 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 12 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 9 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 14 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 4 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 7 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 29 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 13 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 25 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 18 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 4 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 18 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 29 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeAppend: appending 1298 bytes for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| InvokeHandlers: 365F750C521EF5B1D517D7DC18D65DD3
2007/11/30 12:16:02| InvokeHandlers: checking client #0
2007/11/30 12:16:02| cbdataLock: 0xed6e98
2007/11/30 12:16:02| storeClientCopy2: 365F750C521EF5B1D517D7DC18D65DD3
2007/11/30 12:16:02| storeClientCopy3: Copying from memory
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| clientSendMoreHeaderData: http://www.mail.ru/, 1620 bytes
2007/11/30 12:16:02| clientSendMoreHeaderData: FD 59 'http://www.mail.ru/', out.offset=0 
2007/11/30 12:16:02| clientBuildReplyHeader: Error, don't keep-alive
2007/11/30 12:16:02| clientSendMoreHeaderData: Appending 1298 bytes after 322 bytes of headers
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| The reply for GET http://www.mail.ru/ is ALLOWED, because it matched 'DomainUsers'
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataFree: 0xeec098
2007/11/30 12:16:02| cbdataFree: Freeing 0xeec098
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| comm_write: FD 59: sz 1738: hndl 0x41e340: data 0xee6018.
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| commSetSelect: FD 59 type 2
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xed6e98
2007/11/30 12:16:02| storeComplete: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeEntryValidLength: Checking '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storeEntryValidLength:     object_len = 1620
2007/11/30 12:16:02| storeEntryValidLength:         hdr_sz = 322
2007/11/30 12:16:02| storeEntryValidLength: content_length = 1298
2007/11/30 12:16:02| InvokeHandlers: 365F750C521EF5B1D517D7DC18D65DD3
2007/11/30 12:16:02| InvokeHandlers: checking client #0
2007/11/30 12:16:02| storeUnlockObject: key '365F750C521EF5B1D517D7DC18D65DD3' count=2
2007/11/30 12:16:02| cbdataFree: 0xee5018
2007/11/30 12:16:02| cbdataFree: Freeing 0xee5018
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataFree: 0xea3a18
2007/11/30 12:16:02| cbdataFree: Freeing 0xea3a18
2007/11/30 12:16:02| cbdataValid: 0xea3618
2007/11/30 12:16:02| cbdataValid: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| commSetSelect: FD 59 type 1
2007/11/30 12:16:02| comm_select: timeout 923
2007/11/30 12:16:02| commHandleWrite: FD 59: off 0, sz 1738.
2007/11/30 12:16:02| commHandleWrite: write() returns 1738
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| clientWriteComplete: FD 59, sz 1738, err 0, off 1620, len 1620
2007/11/30 12:16:02| clientWriteComplete: FD 59 transfer is DONE
2007/11/30 12:16:02| comm_close: FD 59
2007/11/30 12:16:02| commCallCloseHandlers: FD 59
2007/11/30 12:16:02| commCallCloseHandlers: ch->handler=0x41b8f0
2007/11/30 12:16:02| cbdataValid: 0xea3618
2007/11/30 12:16:02| connStateFree: FD 59
2007/11/30 12:16:02| httpRequestFree: http://www.mail.ru/
2007/11/30 12:16:02| cbdataLock: 0x76bcd8
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0x76bcd8
2007/11/30 12:16:02| cbdataFree: 0xea3a18
2007/11/30 12:16:02| cbdataFree: Freeing 0xea3a18
2007/11/30 12:16:02| storeClientUnregister: called for '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| storePendingNClients: returning 0
2007/11/30 12:16:02| storeUnlockObject: key '365F750C521EF5B1D517D7DC18D65DD3' count=1
2007/11/30 12:16:02| cbdataFree: 0xed6e98
2007/11/30 12:16:02| cbdataFree: Freeing 0xed6e98
2007/11/30 12:16:02| storeUnlockObject: key '365F750C521EF5B1D517D7DC18D65DD3' count=0
2007/11/30 12:16:02| storePendingNClients: returning 0
2007/11/30 12:16:02| storeRelease: Releasing: '365F750C521EF5B1D517D7DC18D65DD3'
2007/11/30 12:16:02| destroy_StoreEntry: destroying 0xed6e00
2007/11/30 12:16:02| ctx: enter level  0: 'http://www.mail.ru/'
2007/11/30 12:16:02| destroy_MemObject: destroying 0xed7e00
2007/11/30 12:16:02| ctx: exit level  0
2007/11/30 12:16:02| cbdataFree: 0xee6018
2007/11/30 12:16:02| cbdataFree: 0xee6018 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataFree: 0xea3618
2007/11/30 12:16:02| cbdataFree: 0xea3618 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xea3618
2007/11/30 12:16:02| fd_close FD 59 Reading next request
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xee6018
2007/11/30 12:16:02| comm_select: timeout 923
2007/11/30 12:16:02| comm_select: kqueue event error: (9) Bad file descriptor
2007/11/30 12:16:02| comm_select: kqueue event error: (9) Bad file descriptor
2007/11/30 12:16:02| comm_select: timeout 923
2007/11/30 12:16:02| commSetSelect: FD 61 type 1
2007/11/30 12:16:02| fd_open FD 59 HTTP Request
2007/11/30 12:16:02| httpAccept: FD 59: accepted port 8787 client 192.168.10.2:1483
2007/11/30 12:16:02| cbdataLock: 0x767098
2007/11/30 12:16:02| comm_add_close_handler: FD 59, handler=0x41b8f0, data=0xea3618
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| commSetTimeout: FD 59 timeout 300
2007/11/30 12:16:02| aclCheckFast: list: 0x76f0d8
2007/11/30 12:16:02| aclMatchAclList: checking all
2007/11/30 12:16:02| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
2007/11/30 12:16:02| aclMatchIp: '192.168.10.2' found
2007/11/30 12:16:02| aclMatchAclList: returning 1
2007/11/30 12:16:02| commSetSelect: FD 59 type 1
2007/11/30 12:16:02| comm_accept: FD 61: (35) Resource temporarily unavailable
2007/11/30 12:16:02| comm_select: timeout 902
2007/11/30 12:16:02| clientReadRequest: FD 59: reading request...
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| parseHttpRequest: Method is 'GET'
2007/11/30 12:16:02| parseHttpRequest: URI is 'http://www.mail.ru/'
2007/11/30 12:16:02| parseHttpRequest: req_hdr = {Host: www.mail.ru
2007/11/30 12:16:02| parseHttpRequest: end = {}
2007/11/30 12:16:02| parseHttpRequest: prefix_sz = 595, req_line_sz = 34
2007/11/30 12:16:02| parseHttpRequest: Request Header is
2007/11/30 12:16:02| parseHttpRequest: Complete request received
2007/11/30 12:16:02| conn->in.offset = 0
2007/11/30 12:16:02| commSetTimeout: FD 59 timeout 86400
2007/11/30 12:16:02| clientSetKeepaliveFlag: http_ver = 1.1
2007/11/30 12:16:02| clientSetKeepaliveFlag: method = GET
2007/11/30 12:16:02| cbdataLock: 0x76bcd8
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0x76bcd8
2007/11/30 12:16:02| aclCheck: checking 'http_access allow DomainUsers'
2007/11/30 12:16:02| aclMatchAclList: checking DomainUsers
2007/11/30 12:16:02| aclMatchAcl: checking 'acl DomainUsers proxy_auth REQUIRED'
2007/11/30 12:16:02| authenticateAuthenticate: no connection authentication type
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| aclMatchAcl: returning 0 sending credentials to helper.
2007/11/30 12:16:02| aclMatchAclList: no match, returning 0
2007/11/30 12:16:02| aclCheck: checking password via authenticator
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| cbdataLock: 0xea3a18
2007/11/30 12:16:02| cbdataLock: 0xeec118
2007/11/30 12:16:02| helperStatefulGetServer: Running servers 30.
2007/11/30 12:16:02| StatefulGetFirstAvailable: Running servers 30.
2007/11/30 12:16:02| helperStatefulGetServer: Returning 0xb1d818
2007/11/30 12:16:02| helperStatefulSubmit: server 0xb1d818, buf 'YR TlRMTVNTUAABAAAAB7IIoggACAAyAAAACgAKACgAAAAFAs4OAAAAD1RFUk1JTkFMMDJBUlRQQUlOVA==
2007/11/30 12:16:02| cbdataValid: 0xeec118
2007/11/30 12:16:02| comm_write: FD 21: sz 84: hndl 0x0: data 0x0.
2007/11/30 12:16:02| commSetSelect: FD 21 type 2
2007/11/30 12:16:02| helperStatefulDispatch: Request sent to ntlmauthenticator #1, 84 bytes
2007/11/30 12:16:02| cbdataValid: 0xea3618
2007/11/30 12:16:02| cbdataValid: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| commSetSelect: FD 59 type 1
2007/11/30 12:16:02| comm_select: timeout 892
2007/11/30 12:16:02| commHandleWrite: FD 21: off 0, sz 84.
2007/11/30 12:16:02| commHandleWrite: write() returns 84
2007/11/30 12:16:02| comm_select: timeout 891
2007/11/30 12:16:02| cbdataValid: 0xb1d818
2007/11/30 12:16:02| helperStatefulHandleRead: 216 bytes from ntlmauthenticator #1.
2007/11/30 12:16:02| commSetSelect: FD 21 type 1
2007/11/30 12:16:02| helperStatefulHandleRead: end of reply found
2007/11/30 12:16:02| cbdataValid: 0xeec118
2007/11/30 12:16:02| cbdataValid: 0xea3a18
2007/11/30 12:16:02| authenticateNTLMHandleReply: Need to challenge the client with a server blob 'TlRMTVNTUAACAAAAEAAQADAAAAAFgomiO+nmzpCQ6dkAAAAAAAAAAF4AXgBAAAAAQQBSAFQAUABBAEkATgBUAAIAEABBAFIAVABQAEEASQBOAFQAAQAMAFIATwBVAFQARQBSAAQAEABhAHIAdABwAGEAaQBuAHQAAwAeAHIAbwB1AHQAZQByAC4AYQByAHQAcABhAGkAbgB0AAAAAAA='
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| cbdataValid: 0x76bcd8
2007/11/30 12:16:02| aclCheck: checking 'http_access allow DomainUsers'
2007/11/30 12:16:02| aclMatchAclList: checking DomainUsers
2007/11/30 12:16:02| aclMatchAcl: checking 'acl DomainUsers proxy_auth REQUIRED'
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| authenticateNTLMAuthenticateUser: need to challenge client 'TlRMTVNTUAACAAAAEAAQADAAAAAFgomiO+nmzpCQ6dkAAAAAAAAAAF4AXgBAAAAAQQBSAFQAUABBAEkATgBUAAIAEABBAFIAVABQAEEASQBOAFQAAQAMAFIATwBVAFQARQBSAAQAEABhAHIAdABwAGEAaQBuAHQAAwAeAHIAbwB1AHQAZQByAC4AYQByAHQAcABhAGkAbgB0AAAAAAA='!
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| aclMatchAcl: returning 0 sending authentication challenge.
2007/11/30 12:16:02| aclMatchAclList: no match, returning 0
2007/11/30 12:16:02| aclCheck: match found, returning 2
2007/11/30 12:16:02| cbdataUnlock: 0x76bcd8
2007/11/30 12:16:02| aclCheckCallback: answer=2
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| The request GET http://www.mail.ru/ is DENIED, because it matched 'DomainUsers'
2007/11/30 12:16:02| Access Denied: http://www.mail.ru/
2007/11/30 12:16:02| AclMatchedName = DomainUsers
2007/11/30 12:16:02| Proxy Auth Message = Authentication in progress
2007/11/30 12:16:02| storeCreateEntry: 'http://www.mail.ru/'
2007/11/30 12:16:02| new_MemObject: returning 0xed7e00
2007/11/30 12:16:02| new_StoreEntry: returning 0xed6e00
2007/11/30 12:16:02| storeKeyPrivate: GET http://www.mail.ru/
2007/11/30 12:16:02| storeHashInsert: Inserting Entry 0xed6e00 key 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeReleaseRequest: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeLockObject: key 'D708155F1AF94E88E5A2B71CEBA0AFF5' count=2
2007/11/30 12:16:02| storeClientCopy: D708155F1AF94E88E5A2B71CEBA0AFF5, seen 0, want 0, size 4096, cb 0x41e680, cbdata 0xee6018
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataLock: 0xed6e98
2007/11/30 12:16:02| storeClientCopy2: D708155F1AF94E88E5A2B71CEBA0AFF5
2007/11/30 12:16:02| storeClientCopy3: Waiting for more
2007/11/30 12:16:02| cbdataUnlock: 0xed6e98
2007/11/30 12:16:02| storeLockObject: key 'D708155F1AF94E88E5A2B71CEBA0AFF5' count=3
2007/11/30 12:16:02| errorConvert: %U --> 'http://www.mail.ru/'
2007/11/30 12:16:02| errorConvert: %U --> 'http://www.mail.ru/'
2007/11/30 12:16:02| errorConvert: %U --> 'http://www.mail.ru/'
2007/11/30 12:16:02| errorConvert: %w --> 'admin@artpaint.spb.ru'
2007/11/30 12:16:02| errorConvert: %h --> 'artpaint.spb.ru'
2007/11/30 12:16:02| errorConvert: %T --> 'Fri, 30 Nov 2007 09:16:02 GMT'
2007/11/30 12:16:02| errorConvert: %h --> 'artpaint.spb.ru'
2007/11/30 12:16:02| errorConvert: %s --> 'squid/2.6.STABLE16+ICAP'
2007/11/30 12:16:02| errorConvert: %S --> '
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 44 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 6 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 23 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 4 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 29 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 12 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 9 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 14 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 4 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 7 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 29 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 13 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 25 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 18 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 217 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeAppend: appending 1298 bytes for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| InvokeHandlers: D708155F1AF94E88E5A2B71CEBA0AFF5
2007/11/30 12:16:02| InvokeHandlers: checking client #0
2007/11/30 12:16:02| cbdataLock: 0xed6e98
2007/11/30 12:16:02| storeClientCopy2: D708155F1AF94E88E5A2B71CEBA0AFF5
2007/11/30 12:16:02| storeClientCopy3: Copying from memory
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| clientSendMoreHeaderData: http://www.mail.ru/, 1782 bytes
2007/11/30 12:16:02| clientSendMoreHeaderData: FD 59 'http://www.mail.ru/', out.offset=0 
2007/11/30 12:16:02| clientSendMoreHeaderData: Appending 1298 bytes after 484 bytes of headers
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| The reply for GET http://www.mail.ru/ is ALLOWED, because it matched 'DomainUsers'
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataFree: 0xeec098
2007/11/30 12:16:02| cbdataFree: Freeing 0xeec098
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| comm_write: FD 59: sz 1905: hndl 0x41e340: data 0xee6018.
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| commSetSelect: FD 59 type 2
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xed6e98
2007/11/30 12:16:02| storeComplete: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeEntryValidLength: Checking 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storeEntryValidLength:     object_len = 1782
2007/11/30 12:16:02| storeEntryValidLength:         hdr_sz = 484
2007/11/30 12:16:02| storeEntryValidLength: content_length = 1298
2007/11/30 12:16:02| InvokeHandlers: D708155F1AF94E88E5A2B71CEBA0AFF5
2007/11/30 12:16:02| InvokeHandlers: checking client #0
2007/11/30 12:16:02| storeUnlockObject: key 'D708155F1AF94E88E5A2B71CEBA0AFF5' count=2
2007/11/30 12:16:02| cbdataFree: 0xee5018
2007/11/30 12:16:02| cbdataFree: Freeing 0xee5018
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataFree: 0xea3a18
2007/11/30 12:16:02| cbdataFree: 0xea3a18 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataUnlock: 0xea3a18
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xea3a18
2007/11/30 12:16:02| cbdataFree: 0xeec118
2007/11/30 12:16:02| cbdataFree: 0xeec118 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataUnlock: 0xeec118
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xeec118
2007/11/30 12:16:02| comm_select: timeout 889
2007/11/30 12:16:02| commHandleWrite: FD 59: off 0, sz 1905.
2007/11/30 12:16:02| commHandleWrite: write() returns 1905
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| clientWriteComplete: FD 59, sz 1905, err 0, off 1782, len 1782
2007/11/30 12:16:02| clientWriteComplete: FD 59 transfer is DONE
2007/11/30 12:16:02| clientWriteComplete: FD 59 Keeping Alive
2007/11/30 12:16:02| clientKeepaliveNextRequest: FD 59
2007/11/30 12:16:02| httpRequestFree: http://www.mail.ru/
2007/11/30 12:16:02| cbdataLock: 0x76bcd8
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0x76bcd8
2007/11/30 12:16:02| cbdataFree: 0xea3a18
2007/11/30 12:16:02| cbdataFree: Freeing 0xea3a18
2007/11/30 12:16:02| storeClientUnregister: called for 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| storePendingNClients: returning 0
2007/11/30 12:16:02| storeUnlockObject: key 'D708155F1AF94E88E5A2B71CEBA0AFF5' count=1
2007/11/30 12:16:02| cbdataFree: 0xed6e98
2007/11/30 12:16:02| cbdataFree: Freeing 0xed6e98
2007/11/30 12:16:02| storeUnlockObject: key 'D708155F1AF94E88E5A2B71CEBA0AFF5' count=0
2007/11/30 12:16:02| storePendingNClients: returning 0
2007/11/30 12:16:02| storeRelease: Releasing: 'D708155F1AF94E88E5A2B71CEBA0AFF5'
2007/11/30 12:16:02| destroy_StoreEntry: destroying 0xed6e00
2007/11/30 12:16:02| ctx: enter level  0: 'http://www.mail.ru/'
2007/11/30 12:16:02| destroy_MemObject: destroying 0xed7e00
2007/11/30 12:16:02| ctx: exit level  0
2007/11/30 12:16:02| cbdataFree: 0xee6018
2007/11/30 12:16:02| cbdataFree: 0xee6018 has 1 locks, not freeing
2007/11/30 12:16:02| clientKeepaliveNextRequest: FD 59 reading next req
2007/11/30 12:16:02| commSetTimeout: FD 59 timeout 120
2007/11/30 12:16:02| clientReadRequest: FD 59: reading request...
2007/11/30 12:16:02| clientReadRequest: FD 59: no data to process ((35) Resource temporarily unavailable)
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| cbdataValid: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| commSetSelect: FD 59 type 1
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xee6018
2007/11/30 12:16:02| comm_select: timeout 889
2007/11/30 12:16:02| clientReadRequest: FD 59: reading request...
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| parseHttpRequest: Method is 'GET'
2007/11/30 12:16:02| parseHttpRequest: URI is 'http://www.mail.ru/'
2007/11/30 12:16:02| parseHttpRequest: req_hdr = {Host: www.mail.ru
2007/11/30 12:16:02| parseHttpRequest: end = {}
2007/11/30 12:16:02| parseHttpRequest: prefix_sz = 742, req_line_sz = 34
2007/11/30 12:16:02| parseHttpRequest: Request Header is
2007/11/30 12:16:02| parseHttpRequest: Complete request received
2007/11/30 12:16:02| conn->in.offset = 0
2007/11/30 12:16:02| commSetTimeout: FD 59 timeout 86400
2007/11/30 12:16:02| clientSetKeepaliveFlag: http_ver = 1.1
2007/11/30 12:16:02| clientSetKeepaliveFlag: method = GET
2007/11/30 12:16:02| cbdataLock: 0x76bcd8
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0x76bcd8
2007/11/30 12:16:02| aclCheck: checking 'http_access allow DomainUsers'
2007/11/30 12:16:02| aclMatchAclList: checking DomainUsers
2007/11/30 12:16:02| aclMatchAcl: checking 'acl DomainUsers proxy_auth REQUIRED'
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| aclMatchAcl: returning 0 sending credentials to helper.
2007/11/30 12:16:02| aclMatchAclList: no match, returning 0
2007/11/30 12:16:02| aclCheck: checking password via authenticator
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| cbdataLock: 0xea3a18
2007/11/30 12:16:02| cbdataLock: 0xeec118
2007/11/30 12:16:02| helperStatefulSubmit: server 0xb1d818, buf 'KK TlRMTVNTUAADAAAAGAAYAHIAAAAYABgAigAAABAAEABIAAAABgAGAFgAAAAUABQAXgAAAAAAAACiAAAABYKIogUCzg4AAAAPQQBSAFQAUABBAEkATgBUAGYAMABzAFQARQBSAE0ASQBOAEEATAAwADIAKMlQnctMS/gAAAAAAAAAAAAAAAAAAAAAOrvlvGjI1R55/jCXL7sK8qSq5CGRdA+h
2007/11/30 12:16:02| cbdataValid: 0xeec118
2007/11/30 12:16:02| comm_write: FD 21: sz 220: hndl 0x0: data 0x0.
2007/11/30 12:16:02| commSetSelect: FD 21 type 2
2007/11/30 12:16:02| helperStatefulDispatch: Request sent to ntlmauthenticator #1, 220 bytes
2007/11/30 12:16:02| cbdataValid: 0xea3618
2007/11/30 12:16:02| cbdataValid: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| commSetSelect: FD 59 type 1
2007/11/30 12:16:02| comm_select: timeout 884
2007/11/30 12:16:02| commHandleWrite: FD 21: off 0, sz 220.
2007/11/30 12:16:02| commHandleWrite: write() returns 220
2007/11/30 12:16:02| comm_select: timeout 884
2007/11/30 12:16:02| cbdataValid: 0xb1d818
2007/11/30 12:16:02| helperStatefulHandleRead: 7 bytes from ntlmauthenticator #1.
2007/11/30 12:16:02| commSetSelect: FD 21 type 1
2007/11/30 12:16:02| helperStatefulHandleRead: end of reply found
2007/11/30 12:16:02| cbdataValid: 0xeec118
2007/11/30 12:16:02| cbdataValid: 0xea3a18
2007/11/30 12:16:02| authenticateNTLMHandleReply: Successfully validated user via NTLM. Username 'f0s'
2007/11/30 12:16:02| authenticated user f0s
2007/11/30 12:16:02| helperStatefulReleaseServer: 0xb1d818
2007/11/30 12:16:02| helperStatefulReset: 0xb1d818
2007/11/30 12:16:02| StatefulGetFirstAvailable: Running servers 30.
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| cbdataValid: 0x76bcd8
2007/11/30 12:16:02| aclCheck: checking 'http_access allow DomainUsers'
2007/11/30 12:16:02| aclMatchAclList: checking DomainUsers
2007/11/30 12:16:02| aclMatchAcl: checking 'acl DomainUsers proxy_auth REQUIRED'
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| authenticateAuthUserRequestSetIp: user 'f0s' has been seen at a new IP address (192.168.10.2)
2007/11/30 12:16:02| authenticateValidateUser: Validated Auth_user request '0xe9cc60'.
2007/11/30 12:16:02| aclMatchAclList: returning 1
2007/11/30 12:16:02| aclCheck: match found, returning 1
2007/11/30 12:16:02| cbdataUnlock: 0x76bcd8
2007/11/30 12:16:02| aclCheckCallback: answer=1
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| The request GET http://www.mail.ru/ is ALLOWED, because it matched 'DomainUsers'
2007/11/30 12:16:02| clientRedirectStart: 'http://www.mail.ru/'
2007/11/30 12:16:02| redirectStart: 'http://www.mail.ru/'
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataLock: 0xeeb618
2007/11/30 12:16:02| cbdataValid: 0xeeb618
2007/11/30 12:16:02| comm_write: FD 6: sz 45: hndl 0x439180: data 0xb1e418.
2007/11/30 12:16:02| cbdataLock: 0xb1e418
2007/11/30 12:16:02| commSetSelect: FD 6 type 2
2007/11/30 12:16:02| helperDispatch: Request sent to url_rewriter #1, 45 bytes
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataFree: 0xea3a18
2007/11/30 12:16:02| cbdataFree: 0xea3a18 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataUnlock: 0xea3a18
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xea3a18
2007/11/30 12:16:02| cbdataFree: 0xeec118
2007/11/30 12:16:02| cbdataFree: 0xeec118 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataUnlock: 0xeec118
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xeec118
2007/11/30 12:16:02| comm_select: timeout 872
2007/11/30 12:16:02| commHandleWrite: FD 6: off 0, sz 45.
2007/11/30 12:16:02| commHandleWrite: write() returns 45
2007/11/30 12:16:02| cbdataValid: 0xb1e418
2007/11/30 12:16:02| cbdataUnlock: 0xb1e418
2007/11/30 12:16:02| comm_select: timeout 871
2007/11/30 12:16:02| cbdataValid: 0xb1e418
2007/11/30 12:16:02| helperHandleRead: 43 bytes from url_rewriter #1.
2007/11/30 12:16:02| commSetSelect: FD 6 type 1
2007/11/30 12:16:02| helperHandleRead: end of reply found: http://www.mail.ru/ 192.168.10.2/- f0s GET
2007/11/30 12:16:02| cbdataValid: 0xeeb618
2007/11/30 12:16:02| redirectHandleRead: {http://www.mail.ru/ 192.168.10.2/- f0s GET}
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| clientRedirectDone: 'http://www.mail.ru/' result=http://www.mail.ru/
2007/11/30 12:16:02| hdr cc: ignoring duplicate cache-directive: near 'max-age=0, max-age=0' in 'max-age=0, max-age=0, max-age=0'
2007/11/30 12:16:02| hdr cc: ignoring duplicate cache-directive: near 'max-age=0' in 'max-age=0, max-age=0, max-age=0'
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| clientInterpretRequestHeaders: REQ_NOCACHE = NOT SET
2007/11/30 12:16:02| clientInterpretRequestHeaders: REQ_CACHABLE = SET
2007/11/30 12:16:02| clientInterpretRequestHeaders: REQ_HIERARCHICAL = SET
2007/11/30 12:16:02| cbdataLock: 0x75d598
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0x75d598
2007/11/30 12:16:02| aclCheck: checking 'no_cache deny QUERY'
2007/11/30 12:16:02| aclMatchAclList: checking QUERY
2007/11/30 12:16:02| aclMatchAcl: checking 'acl QUERY urlpath_regex cgi-bin \?'
2007/11/30 12:16:02| aclMatchRegex: checking '/'
2007/11/30 12:16:02| aclMatchRegex: looking for 'cgi-bin'
2007/11/30 12:16:02| aclMatchRegex: looking for '\?'
2007/11/30 12:16:02| aclMatchAclList: no match, returning 0
2007/11/30 12:16:02| cbdataUnlock: 0x75d598
2007/11/30 12:16:02| aclCheck: NO match found, returning 1
2007/11/30 12:16:02| aclCheckCallback: answer=1
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| clientProcessRequest: GET 'http://www.mail.ru/'
2007/11/30 12:16:02| storeGet: looking up D837AEA7EECF9EEEB0B4F5985AE4F5CA
2007/11/30 12:16:02| clientProcessRequest2: storeGet() MISS
2007/11/30 12:16:02| clientProcessRequest: TCP_MISS for 'http://www.mail.ru/'
2007/11/30 12:16:02| clientProcessMiss: 'GET http://www.mail.ru/'
2007/11/30 12:16:02| storeCreateEntry: 'http://www.mail.ru/'
2007/11/30 12:16:02| new_MemObject: returning 0xed7e00
2007/11/30 12:16:02| new_StoreEntry: returning 0xed6e00
2007/11/30 12:16:02| storeKeyPrivate: GET http://www.mail.ru/
2007/11/30 12:16:02| storeHashInsert: Inserting Entry 0xed6e00 key '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeLockObject: key '718F731A218D9231B0EDE38DFA249E2A' count=2
2007/11/30 12:16:02| storeClientCopy: 718F731A218D9231B0EDE38DFA249E2A, seen 0, want 0, size 4096, cb 0x41e680, cbdata 0xee6018
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataLock: 0xed6e98
2007/11/30 12:16:02| storeClientCopy2: 718F731A218D9231B0EDE38DFA249E2A
2007/11/30 12:16:02| storeClientCopy3: Waiting for more
2007/11/30 12:16:02| cbdataUnlock: 0xed6e98
2007/11/30 12:16:02| aclCheckFast: list: 0x0
2007/11/30 12:16:02| aclCheckFast: no matches, returning: 1
2007/11/30 12:16:02| fwdStart: 'http://www.mail.ru/'
2007/11/30 12:16:02| storeLockObject: key '718F731A218D9231B0EDE38DFA249E2A' count=3
2007/11/30 12:16:02| peerSelect: http://www.mail.ru/
2007/11/30 12:16:02| storeLockObject: key '718F731A218D9231B0EDE38DFA249E2A' count=4
2007/11/30 12:16:02| cbdataLock: 0xeeb698
2007/11/30 12:16:02| peerSelectFoo: 'GET www.mail.ru'
2007/11/30 12:16:02| peerCheckNetdbDirect: MY RTT = 0 msec
2007/11/30 12:16:02| peerCheckNetdbDirect: minimum_direct_rtt = 400 msec
2007/11/30 12:16:02| peerCheckNetdbDirect: MY hops = 0
2007/11/30 12:16:02| peerCheckNetdbDirect: minimum_direct_hops = 4
2007/11/30 12:16:02| whichPeer: from 0.0.0.0 port 0
2007/11/30 12:16:02| peerSelectFoo: direct = DIRECT_MAYBE
2007/11/30 12:16:02| peerSelectIcpPing: http://www.mail.ru/
2007/11/30 12:16:02| neighborsCount: 0
2007/11/30 12:16:02| peerSelectIcpPing: counted 0 neighbors
2007/11/30 12:16:02| peerGetSomeParent: GET www.mail.ru
2007/11/30 12:16:02| getDefaultParent: returning NULL
2007/11/30 12:16:02| peerUserHashSelectParent: Calculating hash for f0s
2007/11/30 12:16:02| peerSourceHashSelectParent: Calculating hash for 192.168.10.2
2007/11/30 12:16:02| getRoundRobinParent: returning NULL
2007/11/30 12:16:02| getFirstUpParent: returning NULL
2007/11/30 12:16:02| getAnyParent: returning NULL
2007/11/30 12:16:02| peerAddFwdServer: adding DIRECT DIRECT
2007/11/30 12:16:02| peerSelectCallback: http://www.mail.ru/
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| fwdStartComplete: http://www.mail.ru/
2007/11/30 12:16:02| fwdConnectStart: http://www.mail.ru/
2007/11/30 12:16:02| aclMatchAclList: returning 1
2007/11/30 12:16:02| fwdConnectStart: got addr 84.52.64.20, tos 0
2007/11/30 12:16:02| comm_open: FD 62 is a new socket
2007/11/30 12:16:02| fd_open FD 62 http://www.mail.ru/
2007/11/30 12:16:02| comm_add_close_handler: FD 62, handler=0x42e5d0, data=0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb698
2007/11/30 12:16:02| commSetTimeout: FD 62 timeout 60
2007/11/30 12:16:02| commConnectStart: FD 62, www.mail.ru:80
2007/11/30 12:16:02| cbdataLock: 0xeeb698
2007/11/30 12:16:02| comm_add_close_handler: FD 62, handler=0x423640, data=0xeeb898
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: MISS for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| idnsALookup: buf is 29 bytes for www.mail.ru, id = 0x2371
2007/11/30 12:16:02| cbdataLock: 0xe9ce58
2007/11/30 12:16:02| commSetSelect: FD 5 type 1
2007/11/30 12:16:02| cbdataUnlock: 0xeeb698
2007/11/30 12:16:02| storeUnlockObject: key '718F731A218D9231B0EDE38DFA249E2A' count=3
2007/11/30 12:16:02| cbdataFree: 0xee5618
2007/11/30 12:16:02| cbdataFree: Freeing 0xee5618
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataFree: 0xea3a18
2007/11/30 12:16:02| cbdataFree: Freeing 0xea3a18
2007/11/30 12:16:02| cbdataFree: 0xeeb618
2007/11/30 12:16:02| cbdataFree: 0xeeb618 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataUnlock: 0xeeb618
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xeeb618
2007/11/30 12:16:02| comm_select: timeout 871
2007/11/30 12:16:02| idnsRead: FD 5: received 77 bytes from 192.168.10.8.
2007/11/30 12:16:02| idnsGrokReply: ID 0x2371, 3 answers
2007/11/30 12:16:02| cbdataValid: 0xe9ce58
2007/11/30 12:16:02| cbdataUnlock: 0xe9ce58
2007/11/30 12:16:02| cbdataFree: 0xe9ce58
2007/11/30 12:16:02| cbdataFree: Freeing 0xe9ce58
2007/11/30 12:16:02| ipcacheParse: #0 194.67.57.126
2007/11/30 12:16:02| ipcacheParse: #1 194.67.57.226
2007/11/30 12:16:02| ipcacheParse: #2 194.67.57.26
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheMarkBadAddr: www.mail.ru [194.67.57.126]
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.26
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| cbdataFree: 0xeef018
2007/11/30 12:16:02| cbdataFree: Freeing 0xeef018
2007/11/30 12:16:02| eventRun: RUN ID 57
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| eventRun: Running 'commReconnect', id 56
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.26
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 0
2007/11/30 12:16:02| eventRun: RUN ID 58
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| eventRun: Running 'commReconnect', id 57
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.26
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 0
2007/11/30 12:16:02| eventRun: RUN ID 59
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| eventRun: Running 'commReconnect', id 58
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.26
2007/11/30 12:16:02| comm_remove_close_handler: FD 62, handler=0x423640, data=0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| commSetTimeout: FD 62 timeout -1
2007/11/30 12:16:02| commConnectFree: FD 62
2007/11/30 12:16:02| cbdataFree: 0xeeb898
2007/11/30 12:16:02| cbdataFree: 0xeeb898 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| fwdFail: ERR_CONNECT_FAIL "Service Unavailable"
2007/11/30 12:16:02| comm_close: FD 62
2007/11/30 12:16:02| commCallCloseHandlers: FD 62
2007/11/30 12:16:02| commCallCloseHandlers: ch->handler=0x42e5d0
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| fwdServerClosed: FD 62 http://www.mail.ru/
2007/11/30 12:16:02| fwdServerClosed: re-forwarding (1 tries, 0 secs)
2007/11/30 12:16:02| cbdataLock: 0xeeb698
2007/11/30 12:16:02| cbdataUnlock: 0xeeb698
2007/11/30 12:16:02| fd_close FD 62 http://www.mail.ru/
2007/11/30 12:16:02| cbdataUnlock: 0xeeb698
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 50
2007/11/30 12:16:02| eventRun: RUN ID 60
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataUnlock: 0xeeb698
2007/11/30 12:16:02| eventRun: Running 'fwdConnectStart', id 59
2007/11/30 12:16:02| fwdConnectStart: http://www.mail.ru/
2007/11/30 12:16:02| aclMatchAclList: returning 1
2007/11/30 12:16:02| fwdConnectStart: got addr 84.52.64.20, tos 0
2007/11/30 12:16:02| comm_open: FD 62 is a new socket
2007/11/30 12:16:02| fd_open FD 62 http://www.mail.ru/
2007/11/30 12:16:02| comm_add_close_handler: FD 62, handler=0x42e5d0, data=0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb698
2007/11/30 12:16:02| commSetTimeout: FD 62 timeout 60
2007/11/30 12:16:02| commConnectStart: FD 62, www.mail.ru:80
2007/11/30 12:16:02| cbdataLock: 0xeeb698
2007/11/30 12:16:02| comm_add_close_handler: FD 62, handler=0x423640, data=0xeeb898
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheMarkBadAddr: www.mail.ru [194.67.57.26]
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 0
2007/11/30 12:16:02| eventRun: RUN ID 61
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| eventRun: Running 'commReconnect', id 60
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 0
2007/11/30 12:16:02| eventRun: RUN ID 62
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| eventRun: Running 'commReconnect', id 61
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 0
2007/11/30 12:16:02| eventRun: RUN ID 63
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| eventRun: Running 'commReconnect', id 62
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| comm_remove_close_handler: FD 62, handler=0x423640, data=0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| commSetTimeout: FD 62 timeout -1
2007/11/30 12:16:02| commConnectFree: FD 62
2007/11/30 12:16:02| cbdataFree: 0xeeb898
2007/11/30 12:16:02| cbdataFree: 0xeeb898 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| fwdFail: ERR_CONNECT_FAIL "Service Unavailable"
2007/11/30 12:16:02| cbdataFree: 0xee5018
2007/11/30 12:16:02| cbdataFree: Freeing 0xee5018
2007/11/30 12:16:02| comm_close: FD 62
2007/11/30 12:16:02| commCallCloseHandlers: FD 62
2007/11/30 12:16:02| commCallCloseHandlers: ch->handler=0x42e5d0
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| fwdServerClosed: FD 62 http://www.mail.ru/
2007/11/30 12:16:02| fwdServerClosed: re-forwarding (2 tries, 0 secs)
2007/11/30 12:16:02| cbdataLock: 0xeeb698
2007/11/30 12:16:02| cbdataUnlock: 0xeeb698
2007/11/30 12:16:02| fd_close FD 62 http://www.mail.ru/
2007/11/30 12:16:02| cbdataUnlock: 0xeeb698
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 50
2007/11/30 12:16:02| eventRun: RUN ID 64
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataUnlock: 0xeeb698
2007/11/30 12:16:02| eventRun: Running 'fwdConnectStart', id 63
2007/11/30 12:16:02| fwdConnectStart: http://www.mail.ru/
2007/11/30 12:16:02| aclMatchAclList: returning 1
2007/11/30 12:16:02| fwdConnectStart: got addr 84.52.64.20, tos 0
2007/11/30 12:16:02| comm_open: FD 62 is a new socket
2007/11/30 12:16:02| fd_open FD 62 http://www.mail.ru/
2007/11/30 12:16:02| comm_add_close_handler: FD 62, handler=0x42e5d0, data=0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb698
2007/11/30 12:16:02| commSetTimeout: FD 62 timeout 60
2007/11/30 12:16:02| commConnectStart: FD 62, www.mail.ru:80
2007/11/30 12:16:02| cbdataLock: 0xeeb698
2007/11/30 12:16:02| comm_add_close_handler: FD 62, handler=0x423640, data=0xeeb898
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheMarkBadAddr: www.mail.ru [194.67.57.226]
2007/11/30 12:16:02| ipcacheCycleAddr: Changing ALL www.mail.ru addrs from BAD to OK
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.126
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 0
2007/11/30 12:16:02| eventRun: RUN ID 65
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| eventRun: Running 'commReconnect', id 64
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.226
2007/11/30 12:16:02| ipcacheMarkBadAddr: www.mail.ru [194.67.57.226]
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.26
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 0
2007/11/30 12:16:02| eventRun: RUN ID 66
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| eventRun: Running 'commReconnect', id 65
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.126
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.26
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 0
2007/11/30 12:16:02| eventRun: RUN ID 67
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| eventRun: Running 'commReconnect', id 66
2007/11/30 12:16:02| ipcache_nbgethostbyname: Name 'www.mail.ru'.
2007/11/30 12:16:02| ipcache_nbgethostbyname: HIT for 'www.mail.ru'
2007/11/30 12:16:02| cbdataLock: 0xeeb898
2007/11/30 12:16:02| cbdataValid: 0xeeb898
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.126
2007/11/30 12:16:02| ipcacheCycleAddr: www.mail.ru now at 194.67.57.26
2007/11/30 12:16:02| comm_remove_close_handler: FD 62, handler=0x423640, data=0xeeb898
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| commSetTimeout: FD 62 timeout -1
2007/11/30 12:16:02| commConnectFree: FD 62
2007/11/30 12:16:02| cbdataFree: 0xeeb898
2007/11/30 12:16:02| cbdataFree: 0xeeb898 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| fwdFail: ERR_CONNECT_FAIL "Service Unavailable"
2007/11/30 12:16:02| cbdataFree: 0xee5818
2007/11/30 12:16:02| cbdataFree: Freeing 0xee5818
2007/11/30 12:16:02| comm_close: FD 62
2007/11/30 12:16:02| commCallCloseHandlers: FD 62
2007/11/30 12:16:02| commCallCloseHandlers: ch->handler=0x42e5d0
2007/11/30 12:16:02| cbdataValid: 0xeeb698
2007/11/30 12:16:02| fwdServerClosed: FD 62 http://www.mail.ru/
2007/11/30 12:16:02| fwdStateFree: 0xeeb698
2007/11/30 12:16:02| storeLockObject: key '718F731A218D9231B0EDE38DFA249E2A' count=4
2007/11/30 12:16:02| errorConvert: %U --> 'http://www.mail.ru/'
2007/11/30 12:16:02| errorConvert: %U --> 'http://www.mail.ru/'
2007/11/30 12:16:02| errorConvert: %E --> '(13) Permission denied'
2007/11/30 12:16:02| errorConvert: %T --> 'Fri, 30 Nov 2007 09:16:02 GMT'
2007/11/30 12:16:02| errorConvert: %h --> 'artpaint.spb.ru'
2007/11/30 12:16:02| errorConvert: %s --> 'squid/2.6.STABLE16+ICAP'
2007/11/30 12:16:02| errorConvert: %S --> '
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 34 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 6 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 23 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 4 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 29 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 12 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 9 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 14 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 3 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 7 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 29 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 13 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 19 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 2 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeAppend: appending 978 bytes for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeReleaseRequest: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| InvokeHandlers: 718F731A218D9231B0EDE38DFA249E2A
2007/11/30 12:16:02| InvokeHandlers: checking client #0
2007/11/30 12:16:02| cbdataLock: 0xed6e98
2007/11/30 12:16:02| storeClientCopy2: 718F731A218D9231B0EDE38DFA249E2A
2007/11/30 12:16:02| storeClientCopy3: Copying from memory
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| clientSendMoreHeaderData: http://www.mail.ru/, 1206 bytes
2007/11/30 12:16:02| clientSendMoreHeaderData: FD 59 'http://www.mail.ru/', out.offset=0 
2007/11/30 12:16:02| clientBuildReplyHeader: Error, don't keep-alive
2007/11/30 12:16:02| cbdataLock: 0x76f158
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| aclCheckFast: list: 0x76f158
2007/11/30 12:16:02| aclMatchAclList: checking all
2007/11/30 12:16:02| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
2007/11/30 12:16:02| aclMatchIp: '192.168.10.2' found
2007/11/30 12:16:02| aclMatchAclList: returning 1
2007/11/30 12:16:02| httpReplyBodyBuildSize: Setting maxBodySize to 0
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0x76f158
2007/11/30 12:16:02| cbdataFree: 0xea3a18
2007/11/30 12:16:02| cbdataFree: Freeing 0xea3a18
2007/11/30 12:16:02| clientSendMoreHeaderData: Appending 978 bytes after 228 bytes of headers
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataLock: 0x76be98
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| cbdataLock: 0xeec098
2007/11/30 12:16:02| cbdataValid: 0x76be98
2007/11/30 12:16:02| aclCheck: checking 'http_reply_access allow all'
2007/11/30 12:16:02| aclMatchAclList: checking all
2007/11/30 12:16:02| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
2007/11/30 12:16:02| aclMatchIp: '192.168.10.2' found
2007/11/30 12:16:02| aclMatchAclList: returning 1
2007/11/30 12:16:02| aclCheck: match found, returning 1
2007/11/30 12:16:02| cbdataUnlock: 0x76be98
2007/11/30 12:16:02| aclCheckCallback: answer=1
2007/11/30 12:16:02| cbdataValid: 0xeec098
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| The reply for GET http://www.mail.ru/ is ALLOWED, because it matched 'all'
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| cbdataFree: 0xeec098
2007/11/30 12:16:02| cbdataFree: 0xeec098 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| comm_write: FD 59: sz 1324: hndl 0x41e340: data 0xee6018.
2007/11/30 12:16:02| cbdataLock: 0xee6018
2007/11/30 12:16:02| commSetSelect: FD 59 type 2
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xeec098
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xeec098
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataFree: 0xea3a18
2007/11/30 12:16:02| cbdataFree: Freeing 0xea3a18
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: 0xed6e98
2007/11/30 12:16:02| storeComplete: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeEntryValidLength: Checking '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storeEntryValidLength:     object_len = 1206
2007/11/30 12:16:02| storeEntryValidLength:         hdr_sz = 228
2007/11/30 12:16:02| storeEntryValidLength: content_length = 978
2007/11/30 12:16:02| InvokeHandlers: 718F731A218D9231B0EDE38DFA249E2A
2007/11/30 12:16:02| InvokeHandlers: checking client #0
2007/11/30 12:16:02| storeUnlockObject: key '718F731A218D9231B0EDE38DFA249E2A' count=3
2007/11/30 12:16:02| cbdataFree: 0xee5018
2007/11/30 12:16:02| cbdataFree: Freeing 0xee5018
2007/11/30 12:16:02| storePendingNClients: returning 1
2007/11/30 12:16:02| storeUnlockObject: key '718F731A218D9231B0EDE38DFA249E2A' count=2
2007/11/30 12:16:02| cbdataFree: 0xeeb698
2007/11/30 12:16:02| cbdataFree: 0xeeb698 has 2 locks, not freeing
2007/11/30 12:16:02| cbdataUnlock: 0xeeb698
2007/11/30 12:16:02| fd_close FD 62 http://www.mail.ru/
2007/11/30 12:16:02| cbdataUnlock: 0xeeb698
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xeeb698
2007/11/30 12:16:02| cbdataUnlock: 0xeeb898
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xeeb898
2007/11/30 12:16:02| comm_select: timeout 768
2007/11/30 12:16:02| commHandleWrite: FD 59: off 0, sz 1324.
2007/11/30 12:16:02| commHandleWrite: write() returns 1324
2007/11/30 12:16:02| cbdataValid: 0xee6018
2007/11/30 12:16:02| clientWriteComplete: FD 59, sz 1324, err 0, off 1206, len 1206
2007/11/30 12:16:02| clientWriteComplete: FD 59 transfer is DONE
2007/11/30 12:16:02| comm_close: FD 59
2007/11/30 12:16:02| commCallCloseHandlers: FD 59
2007/11/30 12:16:02| commCallCloseHandlers: ch->handler=0x41b8f0
2007/11/30 12:16:02| cbdataValid: 0xea3618
2007/11/30 12:16:02| connStateFree: FD 59
2007/11/30 12:16:02| httpRequestFree: http://www.mail.ru/
2007/11/30 12:16:02| cbdataLock: 0x76bcd8
2007/11/30 12:16:02| cbdataLock: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: 0x76bcd8
2007/11/30 12:16:02| cbdataFree: 0xea3a18
2007/11/30 12:16:02| cbdataFree: Freeing 0xea3a18
2007/11/30 12:16:02| storeClientUnregister: called for '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| storePendingNClients: returning 0
2007/11/30 12:16:02| storeUnlockObject: key '718F731A218D9231B0EDE38DFA249E2A' count=1
2007/11/30 12:16:02| cbdataFree: 0xed6e98
2007/11/30 12:16:02| cbdataFree: Freeing 0xed6e98
2007/11/30 12:16:02| storeUnlockObject: key '718F731A218D9231B0EDE38DFA249E2A' count=0
2007/11/30 12:16:02| storePendingNClients: returning 0
2007/11/30 12:16:02| storeRelease: Releasing: '718F731A218D9231B0EDE38DFA249E2A'
2007/11/30 12:16:02| destroy_StoreEntry: destroying 0xed6e00
2007/11/30 12:16:02| ctx: enter level  0: 'http://www.mail.ru/'
2007/11/30 12:16:02| destroy_MemObject: destroying 0xed7e00
2007/11/30 12:16:02| ctx: exit level  0
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataFree: 0xee6018
2007/11/30 12:16:02| cbdataFree: 0xee6018 has 1 locks, not freeing
2007/11/30 12:16:02| authenticateAuthUserRequestFree: freeing request 0xe9cc60
2007/11/30 12:16:02| cbdataFree: 0xea3618
2007/11/30 12:16:02| cbdataFree: 0xea3618 has 1 locks, not freeing
2007/11/30 12:16:02| cbdataUnlock: 0xea3618
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xea3618
2007/11/30 12:16:02| fd_close FD 59 http://www.mail.ru/
2007/11/30 12:16:02| cbdataUnlock: 0xee6018
2007/11/30 12:16:02| cbdataUnlock: Freeing 0xee6018
2007/11/30 12:16:02| comm_select: timeout 767
2007/11/30 12:16:02| comm_select: kqueue event error: (9) Bad file descriptor
2007/11/30 12:16:02| comm_select: kqueue event error: (9) Bad file descriptor
2007/11/30 12:16:02| comm_select: timeout 767
2007/11/30 12:16:02| comm_select: timeout 41
named, named, what is my TTL value?..

[FidoNet 2:550/2 && 2:5030/4441]

Аватара пользователя
f0s
ст. лейтенант
Сообщения: 1082
Зарегистрирован: 2007-03-13 18:43:31
Откуда: Санкт-Петербург
Контактная информация:

Re: squid капризничает :)

Непрочитанное сообщение f0s » 2007-11-30 12:54:03

вот еще немного инфы.. удивительно:

пинг почему-то не идет:

Код: Выделить всё

[f0s@router] /home/f0s/> ping mail.ru
ping: cannot resolve mail.ru: Host name lookup failure
вот инфа о днс:

Код: Выделить всё

[f0s@router] /home/f0s/> cat /etc/resolv.conf
domain  artpaint
nameserver 195.177.122.1
nameserver 195.177.123.1
днс-сервер пингуется по адресу

Код: Выделить всё

[f0s@router] /home/f0s/> ping 195.177.122.1
PING 195.177.122.1 (195.177.122.1): 56 data bytes
64 bytes from 195.177.122.1: icmp_seq=0 ttl=63 time=2.236 ms
64 bytes from 195.177.122.1: icmp_seq=1 ttl=63 time=1.222 ms
64 bytes from 195.177.122.1: icmp_seq=2 ttl=63 time=1.618 ms
^C
--- 195.177.122.1 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.222/1.692/2.236/0.417 ms
а вот по имени почему-то нет :(

Код: Выделить всё

[f0s@router] /home/f0s/> traceroute mail.ru
traceroute: unknown host mail.ru
[f0s@router] /home/f0s/>
named, named, what is my TTL value?..

[FidoNet 2:550/2 && 2:5030/4441]

Аватара пользователя
Urgor
лейтенант
Сообщения: 663
Зарегистрирован: 2006-03-14 16:30:18
Откуда: Гилея (СПб)
Контактная информация:

Re: squid капризничает :)

Непрочитанное сообщение Urgor » 2007-11-30 13:13:00

ipfw show?
Власть в руках у чужаков, и ты им платишь дань...

Аватара пользователя
f0s
ст. лейтенант
Сообщения: 1082
Зарегистрирован: 2007-03-13 18:43:31
Откуда: Санкт-Петербург
Контактная информация:

Re: squid капризничает :)

Непрочитанное сообщение f0s » 2007-11-30 13:27:07

с первой частью вопроса понятно.. днс разрешен только с 192.168.10.8 (это мой днс-сервер, который смотрит локалку, а если на найдет изет у прова). меняем инфу в /etc/resolv.conf

на

Код: Выделить всё

nameserver 192.168.10.8
далее:

Код: Выделить всё

[f0s@router] /home/f0s/> nslookup mail.ru
Server:         192.168.10.8
Address:        192.168.10.8#53

Non-authoritative answer:
Name:   mail.ru
Address: 194.67.57.226
Name:   mail.ru
Address: 194.67.57.26
Name:   mail.ru
Address: 194.67.57.126

вроде все ок! теперь пробуем подключится:

Код: Выделить всё

[f0s@router] /home/f0s/> lynx mail.ru
Внимание!: Не удается установить соединение с удаленной машиной.
Идет поиск mail.ru сначала
Идет поиск mail.ru
Устанавливается HTTP соединение с mail.ru
Внимание!: Не удается установить соединение с удаленной машиной.

lynx: Нет доступа к начальному файлу http://mail.ru/
вотъ:

Код: Выделить всё

[f0s@router] /home/f0s/> ping mail.ru
PING mail.ru (194.67.57.226): 56 data bytes
64 bytes from 194.67.57.226: icmp_seq=0 ttl=122 time=9.623 ms
64 bytes from 194.67.57.226: icmp_seq=1 ttl=122 time=9.336 ms
^C
--- mail.ru ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 9.336/9.479/9.623/0.144 ms

и еще:

Код: Выделить всё

[f0s@router] /home/f0s/> nslookup chat.ru
Server:         192.168.10.8
Address:        192.168.10.8#53

Non-authoritative answer:
Name:   chat.ru
Address: 195.161.119.67

и снова пинг:

Код: Выделить всё

[f0s@router] /home/f0s/> ping chat.ru
PING chat.ru (195.161.119.67): 56 data bytes
64 bytes from 195.161.119.67: icmp_seq=0 ttl=58 time=18.031 ms
64 bytes from 195.161.119.67: icmp_seq=1 ttl=58 time=15.978 ms
^C
--- chat.ru ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 15.978/17.005/18.031/1.026 ms
и снова пробуем посмтреть сайт:

Код: Выделить всё

[f0s@router] /home/f0s/> lynx chat.ru
Внимание!: Не удается установить соединение с удаленной машиной.
Идет поиск chat.ru сначала
Идет поиск chat.ru
Устанавливается HTTP соединение с chat.ru
Внимание!: Не удается установить соединение с удаленной машиной.
lynx: Нет доступа к начальному файлу http://chat.ru/
[f0s@router] /home/f0s/>
адрес тачки с которой все это делается: 192.168.10.7

вот на всякий случай:

Код: Выделить всё

[f0s@router] /home/f0s/> ipfw show
00100    0      0 allow tcp from 84.54.64.22 1024-65535 to me dst-port 22 in via xl0
00200    0      0 allow tcp from me 22 to 84.54.64.22 dst-port 1024-65535 out via xl0 established
00300    0      0 deny log logamount 100 icmp from any to any in icmptypes 5,9,13,14,15,16,17
00400    0      0 deny log logamount 100 ip from any to 84.52.64.20 dst-port 137-139,445 in via xl0
00500    0      0 deny log logamount 100 ip from any to 84.52.64.20 dst-port 137-139,445 in via nve0
00600    0      0 allow ip from any to any via lo0
00700    0      0 deny ip from any to 127.0.0.0/8
00800    0      0 deny ip from 127.0.0.0/8 to any
00900    0      0 deny ip from 192.168.10.0/24 to any in via xl0
01000    0      0 deny ip from 255.255.255.240/28 to any in via nve0
01100   24   2232 deny ip from any to 0.0.0.0/8,10.0.0.0/8,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.2.0/24,192.168.0.0/16,204.152.64.0/23,224.0.0.0/3 in via xl0
01200    0      0 deny icmp from any to any frag
01300    0      0 deny icmp from any to 255.255.255.255 in via xl0
01400    0      0 deny icmp from any to 255.255.255.255 out via xl0
01500   11    660 deny ip from not 195.144.122.1,195.144.123.1 to 84.52.64.20 dst-port 25 in via xl0
01600   37   2670 divert 8668 ip from 192.168.10.0/24 to any out via xl0
01700   81   7509 divert 8668 ip from any to 84.52.64.20 in via xl0
01800    0      0 allow tcp from any to 192.168.10.100 dst-port 25 in via xl0
01900    0      0 allow tcp from any to 192.168.10.100 dst-port 3389 in via xl0
02000    0      0 allow tcp from any to 192.168.10.1 dst-port 3389 in via xl0
02100    0      0 allow tcp from any to 192.168.10.2 dst-port 3389 in via xl0
02200    0      0 allow tcp from any to 192.168.10.3 dst-port 3389 in via xl0
02300    0      0 allow tcp from any to 192.168.10.5 dst-port 22 in via xl0
02400    0      0 allow tcp from any to 192.168.10.6 dst-port 22 in via xl0
02500    0      0 allow tcp from any to 192.168.10.7 dst-port 22 in via xl0
02600    0      0 allow tcp from any to 192.168.10.8 dst-port 22 in via xl0
02700    0      0 deny ip from 0.0.0.0/8,10.0.0.0/8,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.2.0/24,192.168.0.0/16,204.152.64.0/23,224.0.0.0/3 to any out via xl0
02800   16   1344 allow icmp from any to any icmptypes 0,8,11
02900   21   1344 allow ip from 192.168.10.0/24{5-8} to any setup
03000 1747 187126 allow ip from any to 192.168.10.0/24 in via nve0
03100  519  60218 allow ip from 192.168.10.0/24 to any out via nve0
03200    0      0 allow tcp from any to any established
03300   56   4256 allow udp from me to any dst-port 123 via xl0
03400   47   3572 allow udp from any 123 to me via xl0
03500    0      0 reject tcp from 192.168.10.0/24 to any via nve0
03600   24   1736 allow udp from 84.52.64.20 53 to 195.177.122.1 dst-port 53 out via xl0
03700   24   1736 allow udp from 192.168.10.8 53 to 195.177.122.1 dst-port 53 in via nve0
03800   19   2404 allow udp from 195.177.122.1 53 to 192.168.10.8 dst-port 53 in via xl0
03900   19   2404 allow udp from 195.177.122.1 53 to 192.168.10.8 dst-port 53 out via nve0
04000   11    766 allow udp from 84.52.64.20 53 to 195.177.123.1 dst-port 53 out via xl0
04100   11    766 allow udp from 192.168.10.8 53 to 195.177.123.1 dst-port 53 in via nve0
04200    7    901 allow udp from 195.177.123.1 53 to 192.168.10.8 dst-port 53 in via xl0
04300    7    901 allow udp from 195.177.123.1 53 to 192.168.10.8 dst-port 53 out via nve0
04400    0      0 allow udp from any to 192.168.10.0/24 in via nve0
04500    0      0 allow udp from 192.168.10.0/24 to any out via nve0
04600  493  79081 deny log logamount 100 ip from any to any
65535   12   1061 deny ip from any to any
[f0s@router] /home/f0s/>
named, named, what is my TTL value?..

[FidoNet 2:550/2 && 2:5030/4441]

Аватара пользователя
f0s
ст. лейтенант
Сообщения: 1082
Зарегистрирован: 2007-03-13 18:43:31
Откуда: Санкт-Петербург
Контактная информация:

Re: squid капризничает :)

Непрочитанное сообщение f0s » 2007-11-30 14:03:07

Код: Выделить всё

${ipfw} add allow all from 84.54.64.20 to any setup
вот без этого правила (с внешним ip) ничгео не работает, неужели оно обязательное? просто его никогда у меня раньше не было, и все работало.. хм.. странно даже.. зачемс оно сейчас понадобилось.. причем я еще понимаю что со шлза этого когда в инет идешь оно от этого дареса пакеты сомтрит.. но почему когда идуешь просто сиз локалки, с адреса к пример 192.168.10.8, то тоже не войти? по идее оно должно попадать пож это правило:

Код: Выделить всё

${ipfw} add allow log all from 192.168.10.0/24{5,6,7,8} to any setup
но однако без добавления в конфиг:

Код: Выделить всё

${ipfw} add allow all from 84.54.64.20 to any setup
ничего не пашет :(

вот конфиг фаера:

Код: Выделить всё

[f0s@router] /home/f0s/> cat /etc/rc.firewall

#!/bin/sh
ipfw="/sbin/ipfw   "
#
LanOut="xl0"                    # Внешняя сетевуха
NetOut="255.255.255.240/28"     # внешняя сеть
IpOut="84.54.64.20"             # Внешний IP
#
LanIn="nve0"                    # внутренняя сетевуха
NetIn="192.168.10.0/24"         # Внутренняя сеть
IpIn="192.168.10.7"
#
servers="192.168.10.5,192.168.10.6,192.168.10.8" # Серверы локалки которым все можно
ssh="84.54.64.22"               # Кому можно подключаться по ssh
#

###############################################################################

# Очищаем все правила
${ipfw} -f flush
${ipfw} -f pipe flush
${ipfw} -f queue flush


# Подключаемся по SSH к серверу из инета
${ipfw} add allow tcp from ${ssh} 1024-65535 to me 22 in via ${LanOut}
${ipfw} add allow tcp from me 22 to ${ssh} 1024-65535 out via ${LanOut} established

# Блокрируем атаки
${ipfw} add deny icmp from any to any in icmptype 5,9,13,14,15,16,17
${ipfw} add deny ip from any to ${IpOut} 137-139,445 in via ${LanOut}
${ipfw} add deny ip from any to ${IpOut} 137-139,445 in via ${LanIn}

# Разрешаем весь траффик по внутреннему интерфейсу (петле)
${ipfw} add allow ip from any to any via lo0

# рубим попытки lo0 куда-то лезть и откуда-то лезть на lo0
${ipfw} add deny ip from any to 127.0.0.0/8
${ipfw} add deny ip from 127.0.0.0/8 to any

# рубим пакеты `от внутр. сети на внеш. инт-се` и `от внеш.сети на внут. инт-се`
${ipfw} add deny ip from ${NetIn} to any in via ${LanOut}
${ipfw} add deny ip from ${NetOut} to any in via ${LanIn}

# режем частные сети на внешнем интерфейсе
${ipfw} add deny ip from any to 0.0.0.0/8,10.0.0.0/8,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.2.0/24,192.168.0.0/16,204.152.64.0/23,224.0.0.0/3 in via ${LanOut}

# рубим фрагментированные icmp
${ipfw} add deny icmp from any to any frag

# рубим широковещательные icmp на внешнем интерфейсе
${ipfw} add deny icmp from any to 255.255.255.255 in via ${LanOut}
${ipfw} add deny icmp from any to 255.255.255.255 out via ${LanOut}

# NAT
${ipfw} add deny all from not 195.144.122.1,195.144.123.1 to ${IpOut} 25 in via ${LanOut}
${ipfw} add divert natd ip from ${NetIn} to any out via ${LanOut}
${ipfw} add divert natd ip from any to ${IpOut} in via ${LanOut}

${ipfw} add allow tcp from any to 192.168.10.100 25 in via ${LanOut}
${ipfw} add allow tcp from any to 192.168.10.100 25 out via ${LanIn}
${ipfw} add allow tcp from any to 192.168.10.100 3389 in via ${LanOut}
${ipfw} add allow tcp from any to 192.168.10.100 3389 out via ${LanIn}

${ipfw} add allow tcp from any to 192.168.10.1 3389 in via ${LanOut}
${ipfw} add allow tcp from any to 192.168.10.1 3389 out via ${LanIn}
${ipfw} add allow tcp from any to 192.168.10.2 3389 in via ${LanOut}
${ipfw} add allow tcp from any to 192.168.10.2 3389 out via ${LanIn}
${ipfw} add allow tcp from any to 192.168.10.3 3389 in via ${LanOut}
${ipfw} add allow tcp from any to 192.168.10.3 3389 out via ${LanIn}

${ipfw} add allow tcp from any to 192.168.10.5 22 in via ${LanOut}
${ipfw} add allow tcp from any to 192.168.10.5 22 out via ${LanIn}
${ipfw} add allow tcp from any to 192.168.10.6 22 in via ${LanOut}
${ipfw} add allow tcp from any to 192.168.10.6 22 out via ${LanIn}
${ipfw} add allow tcp from any to 192.168.10.7 22 in via ${LanOut}
${ipfw} add allow tcp from any to 192.168.10.7 22 out via ${LanIn}
${ipfw} add allow tcp from any to 192.168.10.8 22 in via ${LanOut}
${ipfw} add allow tcp from any to 192.168.10.8 22 out via ${LanIn}

# рубим траффик к частным сетям через внешний интерфейс
${ipfw} add deny ip from 0.0.0.0/8,10.0.0.0/8,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.2.0/24,192.168.0.0/16,204.152.64.0/23,224.0.0.0/3 to any out via ${LanOut}

# разрешаем эхо-запрос, эхо-ответ и время жизни пакета истекло
${ipfw} add allow icmp from any to any icmptypes 0,8,11

# Разрешаем выходить в инет серверам по всем портам
${ipfw} add allow log all from 192.168.10.0/24{5,6,7,8} to any setup

# [b]ВОТ ЭТА СТРОЧКА БЕЗ КОТОРОЙ НИЧЕГО НЕ ПАШЕТ[/b]
#${ipfw} add allow all from 84.54.64.20 to any setup

# Разрешаем траффик внутренней сети на внутреннем интерфейсе (вх/исх)
${ipfw} add allow ip from any to ${NetIn} in via ${LanIn}
${ipfw} add allow ip from ${NetIn} to any out via ${LanIn}

# разрешаем tcp-пакеты по уже установленным соединениям
${ipfw} add allow tcp from any to any established

# разрешаем UDP (для синхронизации времени - 123 порт)
${ipfw} add allow udp from me to any 123 via ${LanOut}
${ipfw} add allow udp from any 123 to me via ${LanOut}

# Запрещем дальнейшее прохождение для всех
${ipfw} add reject tcp from ${NetIn} to any via ${LanIn}

# Разрешаем DNS

${ipfw} add allow udp from ${IpOut} 53 to 195.177.122.1 53 out via ${LanOut}
${ipfw} add allow udp from 192.168.10.8 53 to 195.177.122.1 53 in via ${LanIn}
${ipfw} add allow udp from 195.177.122.1 53 to 192.168.10.8 53 in via ${LanOut}
${ipfw} add allow udp from 195.177.122.1 53 to 192.168.10.8 53 out via ${LanIn}

${ipfw} add allow udp from ${IpOut} 53 to 195.177.123.1 53 out via ${LanOut}
${ipfw} add allow udp from 192.168.10.8 53 to 195.177.123.1 53 in via ${LanIn}
${ipfw} add allow udp from 195.177.123.1 53 to 192.168.10.8 53 in via ${LanOut}
${ipfw} add allow udp from 195.177.123.1 53 to 192.168.10.8 53 out via ${LanIn}

# Разрешаем UDP во всей сети
${ipfw} add allow udp from any to ${NetIn} in via ${LanIn}
${ipfw} add allow udp from ${NetIn} to any out via ${LanIn}

# Всем остальным все запрещаем и пишем в лог
${ipfw} add deny log all from any to any

named, named, what is my TTL value?..

[FidoNet 2:550/2 && 2:5030/4441]

Аватара пользователя
-cat-
сержант
Сообщения: 202
Зарегистрирован: 2007-07-31 0:05:56
Контактная информация:

Re: squid капризничает :)

Непрочитанное сообщение -cat- » 2007-12-01 21:43:14

f0s писал(а):${ipfw} add allow all from 84.54.64.20 to any setup
Однозначно правило неправильное и поведение его не адекватное, рекомендую разобраться чем отличается TCP от UDP ICPM и т.д.

Аватара пользователя
f0s
ст. лейтенант
Сообщения: 1082
Зарегистрирован: 2007-03-13 18:43:31
Откуда: Санкт-Петербург
Контактная информация:

Re: squid капризничает :)

Непрочитанное сообщение f0s » 2007-12-03 11:19:57

-cat- писал(а):
f0s писал(а):${ipfw} add allow all from 84.54.64.20 to any setup
Однозначно правило неправильное и поведение его не адекватное, рекомендую разобраться чем отличается TCP от UDP ICPM и т.д.
под этим правилом выпускам в инет сам шлюз по всем протоколам и портма. а что тут неправильного? или на твой вгзляд лучше изменить как-то ее? просто безе нее не работает ни сквид, ни остальное :)
named, named, what is my TTL value?..

[FidoNet 2:550/2 && 2:5030/4441]

Аватара пользователя
-cat-
сержант
Сообщения: 202
Зарегистрирован: 2007-07-31 0:05:56
Контактная информация:

Re: squid капризничает :)

Непрочитанное сообщение -cat- » 2007-12-03 12:51:22

f0s писал(а):а что тут неправильного?
не правильно использовать all и setup
f0s писал(а):под этим правилом выпускам в инет сам шлюз по всем протоколам и портма.
Ничего подобного, если хочешь проверить, распиши по протоколам и увидишь ошибку.
На мой взгляд использовать setup для исходящих соединений нет никакого смысла.