Страница 1 из 1

squid squidclam clamav

Добавлено: 2007-10-24 11:56:27
tolik
Господа, забил я на c-icap (см. http://forum.lissyara.su/viewtopic.php?f=3&t=5480), начал воевать со squidclam. Поставил с портов версию 0.11_2. Перед установкой сделал так:

Код: Выделить всё

mkdir /tmpdata
mdconfig -a -t malloc -s 128M -u 10
newfs -U /dev/md10
mount /dev/md10 /tmpdata
chmod 1777 /tmpdata
Поправил конфиги:

Код: Выделить всё

#/usr/local/etc/squid/squid.conf
http_port 192.168.1.7:3128
hierarchy_stoplist cgi-bin z
acl QUERY urlpath_regex cgi-bin z
no_cache deny QUERY
cache_dir ufs /usr/local/squid/cache 2048 64 256
cache_mem 128 MB
maximum_object_size 8092 KB
maximum_object_size_in_memory 512 KB
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
icp_port 0
cache_mgr tolik@sbrf.chita.ru
visible_hostname sbrf.chita.ru
pid_filename /usr/local/squid/squid.pid
dns_nameservers 213.59.128.97 213.59.235.235 87.103.236.9 87.103.236.10
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
coredump_dir /var/log/squid
cache_effective_user squid
cache_effective_group squid
auth_param basic program /usr/local/squid/mysql_auth.pl
auth_param basic children 30
auth_param basic realm It is InTeRnEt
auth_param basic credentialsttl 2 hour
redirect_program /usr/local/bin/squidclam
redirect_children 15
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 443 563 80 21 70 210 1025-65535 280 488 591 777
acl everywhere proxy_auth tolik mihalev joe danil morro kharin
acl mm url_regex -i \.mp3$ \.mpeg$ \.avi$ \.mov$
redirector_access deny localhost
redirector_access deny SSL_ports
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access allow all everywhere
delay_pools 1
delay_class 1 1
delay_parameters 1 2000/2000
delay_access 1 allow mm
delay_access 1 deny all
acl user_name proxy_auth "/usr/local/etc/squid/acl/user_file"
acl user_orcb proxy_auth "/usr/local/etc/squid/acl/user_orcb"
acl user_soft proxy_auth "/usr/local/etc/squid/acl/user_soft"
acl url_name dstdomain "/usr/local/etc/squid/acl/url_file"
acl url_orcb dstdomain "/usr/local/etc/squid/acl/url_orcb"
acl url_soft dstdomain "/usr/local/etc/squid/acl/url_soft"
acl time_name time SMW 8:30-17:30
acl time_work time MTWHFA 8:00-21:00
http_access allow user_soft url_soft time_work
http_access allow all user_orcb
http_access allow user_name url_name time_name
http_access allow user_orcb url_orcb time_work
http_access deny all

Код: Выделить всё

#/usr/local/etc/clamsquid.conf
proxy=http://127.0.0.1:3128
url=http://127.0.0.1/antivir.php
tmp=/tmpdata/squidclam-XXXXXXXX
rldb=200
fsize=202400
После установки и правки конфигов - squid -k reconfigure. Сквид вообще никуда не пускает, в /tmpdata создается пустой файл "squidclam.", в var/log/messages обильно вываливает:

Код: Выделить всё

Oct 24 18:10:13 flint squidclam[95705]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:14 flint squidclam[95706]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:14 flint squidclam[95699]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:15 flint squidclam[95700]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:15 flint squidclam[95694]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:15 flint squidclam[95703]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:15 flint squidclam[95702]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:15 flint squidclam[95692]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:16 flint squidclam[95701]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:16 flint squidclam[95704]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:16 flint squidclam[95693]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:16 flint squidclam[95696]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:16 flint squidclam[95697]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:16 flint squidclam[95698]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Oct 24 18:10:17 flint (squid): The url_rewriter helpers are crashing too rapidly, need help!
Oct 24 18:10:17 flint kernel: pid 95691 (squid), uid 100: exited on signal 6 (core dumped)
Oct 24 18:10:17 flint squid[82864]: Squid Parent: child process 95691 exited due to signal 6
Oct 24 18:10:20 flint squid[82864]: Squid Parent: child process 95746 started
... и все заново

Прочтение man mkstemp результатов не дало (не догоняю я, в чем дело).
Подскажите, плз, как эту штуку победить.

Re: squid squidclam clamav

Добавлено: 2007-10-26 14:23:38
XliN
У меня таже байда, только вместо

Код: Выделить всё

Oct 24 18:10:16 flint squidclam[95704]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
пишет

Код: Выделить всё

Oct 24 18:10:16 flint squidclam[ХХХХХХХ]: Could not get tempfile handle for template /tmpdata/squidclam. Read `man mkstemp`
Да, а что было добавлено в squid.conf?

P.S. Прсле перезапуска у меня комп здох, походу дела ресурсы жрались на 100%, как проверить нагрузку?
P.S.S. Может есть у кого хороший хавто по настройке, а то в инете ничего путного не отрыл ))