Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Squid не пропускает через себя сайты

    Scheduled Pinned Locked Moved Russian
    16 Posts 3 Posters 4.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wernisag
      last edited by

      в System logs про squid очень мало

      apinger: Error while feeding rrdtool: Broken pipe
May 4 15:08:42 	kernel: pid 49943 (squid), uid 62: exited on signal 6
May 4 15:08:42 	squid[49550]: Squid Parent: child process 49943 exited due to signal 6
May 4 15:08:42 	squid[49943]: The url_rewriter helpers are crashing too rapidly, need help!
May 4 15:08:41 	check_reload_status: Syncing firewall
May 4 15:08:40 	check_reload_status: Reloading filter
May 4 15:08:39 	php: : Reloading Squid for configuration sync

      Там последние 300 сообщений. Где можно посмотреть полный лог? И разве логи самого squid-a в файле access.log должен быть пустым?

      в Proxy Interface выбран LAN.

      1 Reply Last reply Reply Quote 0
      • W
        wernisag
        last edited by

        Вот лог загрузки squid.

        2014/05/05 16:17:14| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:17:14| Process ID 37847
2014/05/05 16:17:14| With 11095 file descriptors available
2014/05/05 16:17:14| Using kqueue for the IO loop
2014/05/05 16:17:14| DNS Socket created at 0.0.0.0, port 46838, FD 11
2014/05/05 16:17:14| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:17:14| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:17:14| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:17:14| Referer logging is disabled.
2014/05/05 16:17:14| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:17:14| Unlinkd pipe opened on FD 17
2014/05/05 16:17:14| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:17:14| Target number of buckets: 2000
2014/05/05 16:17:14| Using 8192 Store buckets
2014/05/05 16:17:14| Max Mem  size: 8192 KB
2014/05/05 16:17:14| Max Swap size: 512000 KB
2014/05/05 16:17:14| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:17:14| Store logging disabled
2014/05/05 16:17:14| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.028 seconds = 0.011 user + 0.017 sys
Maximum Resident Size: 5696 KB
Page faults with physical i/o: 0
2014/05/05 16:17:18| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:17:18| Process ID 38299
2014/05/05 16:17:18| With 11095 file descriptors available
2014/05/05 16:17:18| Using kqueue for the IO loop
2014/05/05 16:17:18| DNS Socket created at 0.0.0.0, port 26720, FD 11
2014/05/05 16:17:18| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:17:18| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:17:18| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:17:18| Referer logging is disabled.
2014/05/05 16:17:18| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:17:18| Unlinkd pipe opened on FD 17
2014/05/05 16:17:18| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:17:18| Target number of buckets: 2000
2014/05/05 16:17:18| Using 8192 Store buckets
2014/05/05 16:17:18| Max Mem  size: 8192 KB
2014/05/05 16:17:18| Max Swap size: 512000 KB
2014/05/05 16:17:18| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:17:18| Store logging disabled
2014/05/05 16:17:18| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.028 seconds = 0.009 user + 0.019 sys
Maximum Resident Size: 3772 KB
Page faults with physical i/o: 0
2014/05/05 16:17:21| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:17:21| Process ID 40359
2014/05/05 16:17:21| With 11095 file descriptors available
2014/05/05 16:17:21| Using kqueue for the IO loop
2014/05/05 16:17:21| DNS Socket created at 0.0.0.0, port 10315, FD 11
2014/05/05 16:17:21| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:17:21| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:17:21| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:17:21| Referer logging is disabled.
2014/05/05 16:17:21| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:17:21| Unlinkd pipe opened on FD 17
2014/05/05 16:17:21| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:17:21| Target number of buckets: 2000
2014/05/05 16:17:21| Using 8192 Store buckets
2014/05/05 16:17:21| Max Mem  size: 8192 KB
2014/05/05 16:17:21| Max Swap size: 512000 KB
2014/05/05 16:17:21| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:17:21| Store logging disabled
2014/05/05 16:17:21| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.027 seconds = 0.009 user + 0.018 sys
Maximum Resident Size: 4180 KB
Page faults with physical i/o: 0
2014/05/05 16:17:24| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:17:24| Process ID 41119
2014/05/05 16:17:24| With 11095 file descriptors available
2014/05/05 16:17:24| Using kqueue for the IO loop
2014/05/05 16:17:24| DNS Socket created at 0.0.0.0, port 64818, FD 11
2014/05/05 16:17:24| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:17:24| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:17:24| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:17:24| Referer logging is disabled.
2014/05/05 16:17:24| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:17:24| Unlinkd pipe opened on FD 17
2014/05/05 16:17:24| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:17:24| Target number of buckets: 2000
2014/05/05 16:17:24| Using 8192 Store buckets
2014/05/05 16:17:24| Max Mem  size: 8192 KB
2014/05/05 16:17:24| Max Swap size: 512000 KB
2014/05/05 16:17:24| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:17:24| Store logging disabled
2014/05/05 16:17:24| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.027 seconds = 0.000 user + 0.027 sys
Maximum Resident Size: 5128 KB
Page faults with physical i/o: 0
2014/05/05 16:17:28| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:17:28| Process ID 44050
2014/05/05 16:17:28| With 11095 file descriptors available
2014/05/05 16:17:28| Using kqueue for the IO loop
2014/05/05 16:17:28| DNS Socket created at 0.0.0.0, port 10748, FD 11
2014/05/05 16:17:28| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:17:28| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:17:28| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:17:28| Referer logging is disabled.
2014/05/05 16:17:28| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:17:28| Unlinkd pipe opened on FD 17
2014/05/05 16:17:28| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:17:28| Target number of buckets: 2000
2014/05/05 16:17:28| Using 8192 Store buckets
2014/05/05 16:17:28| Max Mem  size: 8192 KB
2014/05/05 16:17:28| Max Swap size: 512000 KB
2014/05/05 16:17:28| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:17:28| Store logging disabled
2014/05/05 16:17:28| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.028 seconds = 0.021 user + 0.007 sys
Maximum Resident Size: 5540 KB
Page faults with physical i/o: 0
2014/05/05 16:18:23| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:18:23| Process ID 3542
2014/05/05 16:18:23| With 11095 file descriptors available
2014/05/05 16:18:23| Using kqueue for the IO loop
2014/05/05 16:18:23| DNS Socket created at 0.0.0.0, port 51010, FD 11
2014/05/05 16:18:23| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:18:23| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:18:23| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:18:23| Referer logging is disabled.
2014/05/05 16:18:23| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:18:23| Unlinkd pipe opened on FD 16
2014/05/05 16:18:23| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:18:23| Target number of buckets: 2000
2014/05/05 16:18:23| Using 8192 Store buckets
2014/05/05 16:18:23| Max Mem  size: 8192 KB
2014/05/05 16:18:23| Max Swap size: 512000 KB
2014/05/05 16:18:23| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:18:23| Store logging disabled
2014/05/05 16:18:23| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.028 seconds = 0.014 user + 0.014 sys
Maximum Resident Size: 6136 KB
Page faults with physical i/o: 0
2014/05/05 16:18:26| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:18:26| Process ID 4867
2014/05/05 16:18:26| With 11095 file descriptors available
2014/05/05 16:18:26| Using kqueue for the IO loop
2014/05/05 16:18:26| DNS Socket created at 0.0.0.0, port 21239, FD 11
2014/05/05 16:18:26| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:18:26| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:18:26| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:18:26| Referer logging is disabled.
2014/05/05 16:18:26| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:18:26| Unlinkd pipe opened on FD 16
2014/05/05 16:18:26| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:18:26| Target number of buckets: 2000
2014/05/05 16:18:26| Using 8192 Store buckets
2014/05/05 16:18:26| Max Mem  size: 8192 KB
2014/05/05 16:18:26| Max Swap size: 512000 KB
2014/05/05 16:18:26| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:18:26| Store logging disabled
2014/05/05 16:18:26| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.028 seconds = 0.018 user + 0.009 sys
Maximum Resident Size: 4144 KB
Page faults with physical i/o: 0
2014/05/05 16:18:29| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:18:29| Process ID 7300
2014/05/05 16:18:29| With 11095 file descriptors available
2014/05/05 16:18:29| Using kqueue for the IO loop
2014/05/05 16:18:29| DNS Socket created at 0.0.0.0, port 26242, FD 11
2014/05/05 16:18:29| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:18:29| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:18:29| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:18:29| Referer logging is disabled.
2014/05/05 16:18:29| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:18:29| Unlinkd pipe opened on FD 16
2014/05/05 16:18:29| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:18:29| Target number of buckets: 2000
2014/05/05 16:18:29| Using 8192 Store buckets
2014/05/05 16:18:29| Max Mem  size: 8192 KB
2014/05/05 16:18:29| Max Swap size: 512000 KB
2014/05/05 16:18:29| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:18:29| Store logging disabled
2014/05/05 16:18:29| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.027 seconds = 0.014 user + 0.014 sys
Maximum Resident Size: 4700 KB
Page faults with physical i/o: 0
2014/05/05 16:18:33| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:18:33| Process ID 13589
2014/05/05 16:18:33| With 11095 file descriptors available
2014/05/05 16:18:33| Using kqueue for the IO loop
2014/05/05 16:18:33| DNS Socket created at 0.0.0.0, port 7059, FD 11
2014/05/05 16:18:33| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:18:33| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:18:33| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:18:33| Referer logging is disabled.
2014/05/05 16:18:33| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:18:33| Unlinkd pipe opened on FD 16
2014/05/05 16:18:33| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:18:33| Target number of buckets: 2000
2014/05/05 16:18:33| Using 8192 Store buckets
2014/05/05 16:18:33| Max Mem  size: 8192 KB
2014/05/05 16:18:33| Max Swap size: 512000 KB
2014/05/05 16:18:33| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:18:33| Store logging disabled
2014/05/05 16:18:33| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.028 seconds = 0.014 user + 0.014 sys
Maximum Resident Size: 4904 KB
Page faults with physical i/o: 0
2014/05/05 16:18:36| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:18:36| Process ID 13956
2014/05/05 16:18:36| With 11095 file descriptors available
2014/05/05 16:18:36| Using kqueue for the IO loop
2014/05/05 16:18:36| DNS Socket created at 0.0.0.0, port 39006, FD 11
2014/05/05 16:18:36| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:18:36| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:18:36| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:18:36| Referer logging is disabled.
2014/05/05 16:18:36| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:18:36| Unlinkd pipe opened on FD 16
2014/05/05 16:18:36| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:18:36| Target number of buckets: 2000
2014/05/05 16:18:36| Using 8192 Store buckets
2014/05/05 16:18:36| Max Mem  size: 8192 KB
2014/05/05 16:18:36| Max Swap size: 512000 KB
2014/05/05 16:18:36| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:18:36| Store logging disabled
2014/05/05 16:18:36| /var/squid/cache/01: (2) No such file or directory
FATAL: 	Failed to verify one of the swap directories, Check cache.log
	for details.  Run 'squid -z' to create swap directories
	if needed, or if running Squid for the first time.
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.
CPU Usage: 0.028 seconds = 0.021 user + 0.007 sys
Maximum Resident Size: 6140 KB
Page faults with physical i/o: 0
2014/05/05 16:19:23| Starting Squid Cache version 2.7.STABLE9 for amd64-portbld-freebsd8.1...
2014/05/05 16:19:23| Process ID 36782
2014/05/05 16:19:23| With 11095 file descriptors available
2014/05/05 16:19:23| Using kqueue for the IO loop
2014/05/05 16:19:23| DNS Socket created at 0.0.0.0, port 60673, FD 11
2014/05/05 16:19:23| Adding domain localdomain from /etc/resolv.conf
2014/05/05 16:19:23| Adding nameserver 194.67.2.114 from /etc/resolv.conf
2014/05/05 16:19:23| Adding nameserver 194.67.1.154 from /etc/resolv.conf
2014/05/05 16:19:23| Referer logging is disabled.
2014/05/05 16:19:23| logfileOpen: opening log /var/squid/testlog/access.log
2014/05/05 16:19:23| Unlinkd pipe opened on FD 16
2014/05/05 16:19:23| Swap maxSize 512000 + 8192 KB, estimated 40014 objects
2014/05/05 16:19:23| Target number of buckets: 2000
2014/05/05 16:19:23| Using 8192 Store buckets
2014/05/05 16:19:23| Max Mem  size: 8192 KB
2014/05/05 16:19:23| Max Swap size: 512000 KB
2014/05/05 16:19:23| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2014/05/05 16:19:23| Store logging disabled
2014/05/05 16:19:23| Rebuilding storage in /var/squid/cache (CLEAN)
2014/05/05 16:19:23| Using Least Load store dir selection
2014/05/05 16:19:23| Current Directory is /etc
2014/05/05 16:19:23| Loaded Icons.
2014/05/05 16:19:23| Accepting proxy HTTP connections at 192.168.11.1, port 3128, FD 17.
2014/05/05 16:19:23| Accepting transparently proxied HTTP connections at 127.0.0.1, port 3128, FD 18.
2014/05/05 16:19:23| Accepting HTCP messages on port 4827, FD 19.
2014/05/05 16:19:23| Accepting SNMP messages on port 3401, FD 22.
2014/05/05 16:19:23| WCCP Disabled.
2014/05/05 16:19:23| Configuring havp Parent havp/8080/0
2014/05/05 16:19:23| Ready to serve requests.
2014/05/05 16:19:23| Store rebuilding is  3.5% complete
2014/05/05 16:19:25| Done reading /var/squid/cache swaplog (117295 entries)
2014/05/05 16:19:25| Finished rebuilding storage from disk.
2014/05/05 16:19:25|    117295 Entries scanned
2014/05/05 16:19:25|         0 Invalid entries.
2014/05/05 16:19:25|         0 With invalid flags.
2014/05/05 16:19:25|    117295 Objects loaded.
2014/05/05 16:19:25|         0 Objects expired.
2014/05/05 16:19:25|         0 Objects cancelled.
2014/05/05 16:19:25|         0 Duplicate URLs purged.
2014/05/05 16:19:25|         0 Swapfile clashes avoided.
2014/05/05 16:19:25|   Took 1.6 seconds (72048.8 objects/sec).
2014/05/05 16:19:25| Beginning Validation Procedure
2014/05/05 16:19:25|   Completed Validation Procedure
2014/05/05 16:19:25|   Validated 117295 Entries
2014/05/05 16:19:25|   store_swap_size = 358398k
2014/05/05 16:19:25| storeLateRelease: released 0 objects

        Он несколько раз ругается на своп и тут вопрос. Я с *nix операционками очень мало работал, то что squid запускается с разными id процессами - это он пытается снова запуститься или отдельные процессы по очереди грузит, каждый из которых ругается на своп?

        И в аттаче скриншот правил текущих.

        Безымянный.jpg_thumb
        Безымянный.jpg

        1 Reply Last reply Reply Quote 0
        • D
          dvserg
          last edited by

          Для решения проблемы свопа запустите команду squid -z из консоли.
          Я надеюсь у вас HDD установка pfSense (не nanobsd)?

          SquidGuardDoc EN  RU Tutorial
          Localization ru_PFSense

          1 Reply Last reply Reply Quote 0
          • W
            wernisag
            last edited by

            "squid -z" выполнил сразу как увидел ошибку, тут вопрос был больше для саморазвития))

            PfSense стоит самый обычный для hdd, 2.0.3-RELEASE (amd64)

            1 Reply Last reply Reply Quote 0
            • werterW
              werter
              last edited by

              @ wernisag

              И правила fw на LAN поправьте. Ибо не совсем верны они - порты 443,80,5190,995,110,465,3389 - только TCP. Незачем лишнее открывать.

              P.s. Если нет острой необходимости (т.к. все крупные почтовые сервисы "умеют" работать через защищенное соединение , используя порт 465\TCP) ) , то 25-ый порт я бы не открывал вообще.

              1 Reply Last reply Reply Quote 0
              • D
                dvserg
                last edited by

                @wernisag:

                "squid -z" выполнил сразу как увидел ошибку, тут вопрос был больше для саморазвития))

                PfSense стоит самый обычный для hdd, 2.0.3-RELEASE (amd64)

                Отключите на пока всё лишние типа HAVP/squidGuard, проверьте диск утилитой fsck (мануал по ключам в гугле)

                SquidGuardDoc EN  RU Tutorial
                Localization ru_PFSense

                1 Reply Last reply Reply Quote 0
                • W
                  wernisag
                  last edited by

                  HAVP/Guard выключил. Проблема то не в них, это сам squid чудит. Чувствую, что разобравшись с access.log, все станет на свои места.

                  @werter:

                  то 25-ый порт я бы не открывал вообще.

                  У нас свой почтовый сервер, как раз таки на 25 порту работает.

                  1 Reply Last reply Reply Quote 0
                  • werterW
                    werter
                    last edited by

                    как раз таки на 25 порту работает

                    Ну так в Destination пропишите явно его адрес. В чем проблема ?
                    Иначе "заведется" у вас в сети "жук", использующий 25-порт и будете потом антиспам фильтрам доказывать, что вы белый и пушистый.

                    1 Reply Last reply Reply Quote 0
                    • W
                      wernisag
                      last edited by

                      @werter:

                      как раз таки на 25 порту работает

                      Ну так в Destination пропишите явно его адрес. В чем проблема ?
                      Иначе "заведется" у вас в сети "жук", использующий 25-порт и будете потом антиспам фильтрам доказывать, что вы белый и пушистый.

                      Тут все сложнее чем кажется. Почтовый сервер в другом городе и не в моей власти. Мне бы со squid-ом разобраться, а с остальным уже потом.

                      1 Reply Last reply Reply Quote 0
                      • werterW
                        werter
                        last edited by

                        Тут все сложнее чем кажется. Почтовый сервер в другом городе и не в моей власти

                        Извините за настойчивость, но Вы его пингануть не можете , чтобы узнать его IP и внести в destination ???

                        ping <имя-почтового-сервера>

                        1 Reply Last reply Reply Quote 0
                        • W
                          wernisag
                          last edited by

                          Проблема со Squid-ом решена. Все дело в кривых руках, не правильно было настроено правило Layer7.

                          @werter:

                          Тут все сложнее чем кажется. Почтовый сервер в другом городе и не в моей власти

                          Извините за настойчивость, но Вы его пингануть не можете , чтобы узнать его IP и внести в destination ???

                          ping <имя-почтового-сервера>

                          Туплю я уже. В первый раз прочитал и подумал, что вы предлагаете на самом почтовом сервере исправить. Мне Кальмар сниться сегодня будет :-)

                          1 Reply Last reply Reply Quote 0
                          • werterW
                            werter
                            last edited by

                            Версия squid + разрядность (x32\x64)? Версия pfsense + разрядность (x32\x64) ?

                            1. Выгрузить бэкап pfsense без информации об установленных пакетах - надо поставить галочку  (это важно!)

                            2. Подгрузить этот же конфиг. А лучше - установить pfsense c нуля, если есть возможность, подгрузить этот же конфиг.

                            3. Установить только squid вер. 3 (не dev!) и проверить работоспособность.

                            4. Не устанавливать HAVP - толку от него с гулькин нос. Нужна защита - установите антивирусное ПО на клиентских машинах + отберите админские права у пол-лей. Это решает 99 % проблем.

                            5. Если все ОК - установите (если нужно) squidquard + lightsquid (для постороения отчетов).

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.