Хуже всего, что лог парсится в бд и дальше считается. Размер лога 168 Мb, раздел заполнен на 20 процентов только. Места полно. До ротэйта логов лог был под гиг и ничего.
Код: Выделить всё
Squid Cache: Version 3.0.STABLE8
configure options: '--with-default-user=squid' '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=lru heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--enable-auth=basic ntlm digest' '--enable-basic-auth-helpers=DB NCSA PAM MSNT SMB squid_radius_auth YP' '--enable-digest-auth-helpers=password' '--enable-external-acl-helpers=ip_user session unix_group wbinfo_group' '--enable-ntlm-auth-helpers=SMB' '--enable-storeio=ufs diskd null' '--enable-delay-pools' '--disable-snmp' '--disable-wccp' '--disable-ident-lookups' '--enable-arp-acl' '--enable-kqueue' '--with-large-files' '--enable-err-languages=Armenian Azerbaijani Bulgarian Catalan Czech Danish Dutch English Estonian Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Lithuanian Polish Portuguese Romanian Russian-1251 Russian-koi8-r Serbian Simplify_Chinese Slovak Spanish Swedish Traditional_Chinese Turkish Ukrainian-1251 Ukrainian-koi8-u Ukrainian-utf8' '--enable-default-err-language=English' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd7.0' 'build_alias=i386-portbld-freebsd7.0' 'CC=cc' 'CFLAGS=-O2 -fno-strict-aliasing -pipe' 'LDFLAGS=' 'CPPFLAGS=' 'CXX=c++' 'CXXFLAGS=-O2 -fno-strict-aliasing -pipe'
Код: Выделить всё
1227462930.024 1 192.168.0.119 TCP_DENIED/403 1311 CONNECT urs.microsoft.com:443 - NONE/- text/html
1227462930.051 1 192.168.0.119 TCP_DENIED/403 1311 CONNECT urs.microsoft.com:443 - NONE/- text/html
1227619375.701 29 192.168.0.133 TCP_DENIED/403 1311 CONNECT urs.microsoft.cm:443 - NONE/- text/html
1227619375.701 29 192.168.0.133 TCP_DENIED/403 1311 CONNECT urs.microsoft.cm:443 - NONE/- text/htmlCache.log
Код: Выделить всё
2008/11/21 11:41:29| tunnelReadServer: FD 38: read failure: (0) Unknown error:
0
2008/11/21 12:38:12| tunnelReadServer: FD 20: read failure: (0) Unknown error: 0
2008/11/21 12:40:56| tunnelReadServer: FD 20: read failure: (0) Unknown error: 0
2008/11/21 12:57:34| tunnelReadServer: FD 21: read failure: (0) Unknown error: 0
2008/11/24 11:40:14| comm_old_accept: FD 15: (53) Software caused connection abort
2008/11/24 11:40:14| httpAccept: FD 15: accept failure: (53) Software caused connection abort
2008/11/24 11:40:14| comm_old_accept: FD 15: (53) Software caused connection abort
2008/11/24 11:40:14| httpAccept: FD 15: accept failure: (53) Software caused connection abortвот конфиг сквида.
Код: Выделить всё
proxy# cat squid.conf
http_port 3128
#cache_peer 127.0.0.1 parent 8888 0 no-query no-digest no-netdb-exchange default
#cache_mem 8 MB
cache_mem 96 MB
cache_swap_low 90
cache_swap_high 95
visible_hostname proxy.domain.loc
cache_effective_user squid
cache_effective_group squid
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 8 KB
ipcache_size 1024
ipcache_low 90
ipcache_high 95
fqdncache_size 1024
cache_replacement_policy lru
memory_replacement_policy lru
#cache_dir ufs /share/squid/cache 100 16 256
cache_dir ufs /var/db/squid/cache 3000 10 128
#url_rewrite_program /usr/local/bin/squidGuard -c /usr/local/etc/squid/squidGuard.conf
#url_rewrite_children 10
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
#cache_store_log /var/log/squid/store.log
cache_store_log none
mime_table /usr/local/etc/squid/mime.conf
pid_filename /var/log/squid/squid.pid
icon_directory /usr/local/etc/squid/icons
error_directory /usr/local/etc/squid/errors/Russian-1251
coredump_dir /var/db/squid/cache
log_ip_on_direct off
#auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
#auth_param ntlm children 5
auth_param basic program /usr/local/libexec/squid/ncsa_auth /usr/local/etc/squid/ACL/passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
#authenticate_ip_ttl 8 hours
authenticate_ip_ttl 20 seconds
request_header_max_size 40 KB
request_body_max_size 0 KB
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
#client_lifetime 3 hours
client_lifetime 3 hours
shutdown_lifetime 10 seconds
acl QUERY urlpath_regex cgi_bin \?
cache deny QUERY
#acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
#acl Safe_ports port 21 # ftp
#acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
#acl Safe_ports port 2083 # multiling http
#acl ICQ_ports port 5190 # ICQ
#acl Magent_ports port 2041 2042 #Magent
acl CONNECT method CONNECT
acl HTTP proto HTTP
acl HTTPS proto HTTPS
acl FTP proto FTP
#never_direct allow HTTP
#never_direct allow HTTPS
#acl mac_address arp "/usr/local/etc/squid/ACL/mac_address"
#acl gods proxy_auth "/usr/local/etc/squid/ACL/users/gods.conf"
acl pass proxy_auth REQUIRED
acl allowed_clients src 192.168.0.20 192.168.0.86 192.168.0.121 192.168.0.143 192.168.0.144 192.168.0.87 192.168.0.104 192.168.0.105 192.168.0.107 192.168.0.108 192.168.0.109 192.168.0.111 192.168.0.115 192.168.0.117 192.168.0.118 192.168.0.128 192.168.0.131 192.168.0.132 192.168.0.139 192.168.0.140 192.168.0.141 192.168.0.101 192.168.0.8
acl allowed_clients2 src 192.168.0.20 192.168.0.121 192.168.0.143 192.168.0.144
acl restricted_sites url_regex "/usr/local/etc/squid/ACL/domains"
acl restricted_sites2 url_regex "/usr/local/etc/squid/ACL/domains2"
acl BUTIK dstdomain www.domain.ru
#acl cachemgr proxy_auth "/usr/local/etc/squid/ACL/users/cachemgr.conf"
#acl admins proxy_auth "/usr/local/etc/squid/ACL/users/admins.conf"
#acl power_users proxy_auth "/usr/local/etc/squid/ACL/users/pusers.conf"
#acl users proxy_auth "/usr/local/etc/squid/ACL/users/users.conf"
#acl guests proxy_auth "/usr/local/etc/squid/ACL/users/guests.conf"
http_access allow manager localhost
http_access deny manager
#http_access allow restricted_sites2
http_access allow allowed_clients2 restricted_sites2
http_access deny restricted_sites2
http_access deny restricted_sites
http_access deny !allowed_clients
http_access allow pass
#http_access deny CONNECT !SSL_ports !ICQ_ports !Magent_ports
http_access deny CONNECT !SSL_ports
http_access deny !Safe_ports
http_access deny to_localhost
#http_access deny all !mac_address
#http_access allow gods
#http_access allow all
#http_access allow cachemgr
#http_access allow admins
#http_access allow power_users
#http_access allow users
#http_access allow guests
http_access deny all
