Pfsense squid acl падение

Slepich

Здравствуйте, при добавлении в Services – Squid proxy server – ACLs - Allowed Subnets порядка 50 адресов формата XX.XX.XX.XX/32 при нажатии SAVE, squid падает и не запускается. Есть какое-то ограничение на количество. Может кто подскажет как это лучше сделать. Спасибо!

werter

Добрый
@slepich
Версии пф, сквида?

Slepich

@werter pf 2.5.2-RELEASE (amd64), sq 0.4.45_4

werter

@slepich
Выкл антивирь (clam).
Что в логах при этом?

Slepich

@werter Не включал. Я не найду где логи, /var/log/squid пусто. Где логи находятся?

viktor_g

@slepich said in Pfsense squid acl падение:

@werter Не включал. Я не найду где логи, /var/log/squid пусто. Где логи находятся?

/var/squid/logs

viktor_g

@slepich ещё посмотрите последние сообщения в /var/log/system.log после нажатия Save

Slepich

@viktor_g said in Pfsense squid acl падение:

@slepich ещё посмотрите последние сообщения в /var/log/system.log после нажатия Save

Aug 2 03:54:43 pfSense squid[57226]: FATAL: Bungled /usr/local/etc/squid/squid.conf line 65: acl allowed_subnets src XX.XX.1.9/32 XX.XX.1.54/32 XX.XX.1.78/32 XX.XX.1.84/32 XX.XX.1.125/32 XX.XX.1.141/32 XX.XX.2.63/32 XX.XX.2.152/32 XX.XX.46.67/32 XX.XX.46.100/32 XX.XX.3.119/32 XX.XX.3.85/32 XX.XX.3.23/32 XX.XX.3.53/32 XX.XX.3.86/32 XX.XX.3.113/32 XX.XX.3.89/32 XX.XX.4.75/32 XX.XX.4.7/32 XX.XX.6.49/32 XX.XX.6.73/32 XX.XX.10.61/32 XX.XX.10.47/32 XX.XX.10.57/32 XX.XX.10.70/32 XX.XX.10.90/32 XX.XX.10.43/32 XX.XX.50.64/32 XX.XX.13.77/32 XX.XX.13.83/32 XX.XX.13.84/32 XX.XX.13.87/32 XX.XX.13.152/32 XX.XX.14.88/32 XX.XX.14.166/32 XX.XX.14.122/32 XX.XX.14.9/32 XX.XX.16.76/32 XX.XX.16.85/32 XX.XX.16.106/32 XX.XX.16.137/32 XX.XX.16.195/32 XX.XX.17.73/32 XX.XX.17.232/32 XX.XX.19.50/32 XX.XX.19.53/32 XX.XX.19.54/32 XX.XX.21.6/32 XX.XX.21.81/32 XX.XX.21.75/32 XX.XX.24.159/32 XX.XX.29.44/32 XX.XX.29.53/32 XX.XX.29.26/32 XX.XX.31.47/32 XX.XX.31.49/32 XX.XX.31.52/32 XX.XX.31.54/32 XX.XX.31.56/32 XX.XX.31.61/32 XX.XX.31.81/32 XX.XX.32.11/32 XX.XX.32.59/32 XX.XX.3
Aug 2 03:54:43 pfSense php-fpm[82746]: /pkg_edit.php: The command '/usr/local/sbin/squid -k reconfigure -f /usr/local/etc/squid/squid.conf' returned exit code '1', the output was '2021/08/02 03:54:43| aclIpParseIpData: Bad host/IP: '10.' in '10.', flags=0 : (8) Name does not resolve 2021/08/02 03:54:43| FATAL: Bungled /usr/local/etc/squid/squid.conf line 65: acl allowed_subnets src XX.XX.1.9/32 XX.XX.1.54/32 XX.XX.1.78/32 XX.XX.1.84/32 XX.XX.1.125/32 XX.XX.1.141/32 XX.XX.2.63/32 XX.XX.2.152/32 XX.XX.46.67/32 XX.XX.46.100/32 XX.XX.3.119/32 XX.XX.3.85/32 XX.XX.3.23/32 XX.XX.3.53/32 XX.XX.3.86/32 XX.XX.3.113/32 XX.XX.3.89/32 XX.XX.4.75/32 XX.XX.4.7/32 XX.XX.6.49/32 XX.XX.6.73/32 XX.XX.10.61/32 XX.XX.10.47/32 XX.XX.10.57/32 XX.XX.10.70/32 XX.XX.10.90/32 XX.XX.10.43/32 XX.XX.50.64/32 XX.XX.13.77/32 XX.XX.13.83/32 XX.XX.13.84/32 XX.XX.13.87/32 XX.XX.13.152/32 XX.XX.14.88/32 XX.XX.14.166/32 XX.XX.14.122/32 XX.XX.14.9/32 XX.XX.16.76/32 XX.XX.16.85/32 XX.XX.16.106/32 XX.XX.16.137/32 XX.XX.16.195/32 XX.XX.17.73/32 XX.XX.17.232/32 XX.XX.19.50/32 XX.XX.19.53/32 XX.XX.19.54/32 XX.XX.21.6/32 XX.XX.21.81/32 XX.XX.21.75/32 XX.XX.24.159/32 XX.XX.29.44/32 XX.XX.29.53/32 XX.XX.29.26/32 XX.XX.31.47/32 XX.XX.31.49/32 XX.XX.31.52/32 XX.XX.31.54/32 XX.XX.31.56/32 XX.XX.31.61/32 XX.XX.31.81/32 XX.XX.32.11/32 XX.XX.32.59/32 XX.XX.32.55/32 2021/08/02 03:54:43| Squid Cache (Version 4.15): Terminated abnormally. CPU Usage: 0.014 seconds = 0.007 user + 0.007 sys Maximum Resident Size: 61024 KB Page faults with physical i/o: 0'
Aug 2 03:54:43 pfSense php-fpm[82746]: /pkg_edit.php: [squid] Starting a proxy monitor script
Aug 2 03:54:44 pfSense check_reload_status[377]: Reloading filter
Aug 2 03:54:48 pfSense squid[87364]: FATAL: Bungled /usr/local/etc/squid/squid.conf line 65: acl allowed_subnets src XX.XX.1.9/32 XX.XX.1.54/32 XX.XX.1.78/32 XX.XX.1.84/32 XX.XX.1.125/32 XX.XX.1.141/32 XX.XX.2.63/32 XX.XX.2.152/32 XX.XX.46.67/32 XX.XX.46.100/32 XX.XX.3.119/32 XX.XX.3.85/32 XX.XX.3.23/32 XX.XX.3.53/32 XX.XX.3.86/32 XX.XX.3.113/32 XX.XX.3.89/32 XX.XX.4.75/32 XX.XX.4.7/32 XX.XX.6.49/32 XX.XX.6.73/32 XX.XX.10.61/32 XX.XX.10.47/32 XX.XX.10.57/32 XX.XX.10.70/32 XX.XX.10.90/32 XX.XX.10.43/32 XX.XX.50.64/32 XX.XX.13.77/32 XX.XX.13.83/32 XX.XX.13.84/32 XX.XX.13.87/32 XX.XX.13.152/32 XX.XX.14.88/32 XX.XX.14.166/32 XX.XX.14.122/32 XX.XX.14.9/32 XX.XX.16.76/32 XX.XX.16.85/32 XX.XX.16.106/32 XX.XX.16.137/32 XX.XX.16.195/32 XX.XX.17.73/32 XX.XX.17.232/32 XX.XX.19.50/32 XX.XX.19.53/32 XX.XX.19.54/32 XX.XX.21.6/32 XX.XX.21.81/32 XX.XX.21.75/32 XX.XX.24.159/32 XX.XX.29.44/32 XX.XX.29.53/32 XX.XX.29.26/32 XX.XX.31.47/32 XX.XX.31.49/32 XX.XX.31.52/32 XX.XX.31.54/32 XX.XX.31.56/32 XX.XX.31.61/32 XX.XX.31.81/32 XX.XX.32.11/32 XX.XX.32.59/32 XX.XX.3
Aug 2 03:54:53 pfSense squid[90763]: FATAL: Bungled /usr/local/etc/squid/squid.conf line 65: acl allowed_subnets src XX.XX.1.9/32 XX.XX.1.54/32 XX.XX.1.78/32 XX.XX.1.84/32 XX.XX.1.125/32 XX.XX.1.141/32 XX.XX.2.63/32 XX.XX.2.152/32 XX.XX.46.67/32 XX.XX.46.100/32 XX.XX.3.119/32 XX.XX.3.85/32 XX.XX.3.23/32 XX.XX.3.53/32 XX.XX.3.86/32 XX.XX.3.113/32 XX.XX.3.89/32 XX.XX.4.75/32 XX.XX.4.7/32 XX.XX.6.49/32 XX.XX.6.73/32 XX.XX.10.61/32 XX.XX.10.47/32 XX.XX.10.57/32 XX.XX.10.70/32 XX.XX.10.90/32 XX.XX.10.43/32 XX.XX.50.64/32 XX.XX.13.77/32 XX.XX.13.83/32 XX.XX.13.84/32 XX.XX.13.87/32 XX.XX.13.152/32 XX.XX.14.88/32 XX.XX.14.166/32 XX.XX.14.122/32 XX.XX.14.9/32 XX.XX.16.76/32 XX.XX.16.85/32 XX.XX.16.106/32 XX.XX.16.137/32 XX.XX.16.195/32 XX.XX.17.73/32 XX.XX.17.232/32 XX.XX.19.50/32 XX.XX.19.53/32 XX.XX.19.54/32 XX.XX.21.6/32 XX.XX.21.81/32 XX.XX.21.75/32 XX.XX.24.159/32 XX.XX.29.44/32 XX.XX.29.53/32 XX.XX.29.26/32 XX.XX.31.47/32 XX.XX.31.49/32 XX.XX.31.52/32 XX.XX.31.54/32 XX.XX.31.56/32 XX.XX.31.61/32 XX.XX.31.81/32 XX.XX.32.11/32 XX.XX.32.59/32 XX.XX.3
Aug 2 03:54:53 pfSense squid[93176]: FATAL: Bungled /usr/local/etc/squid/squid.conf line 65: acl allowed_subnets src XX.XX.1.9/32 XX.XX.1.54/32 XX.XX.1.78/32 XX.XX.1.84/32 XX.XX.1.125/32 XX.XX.1.141/32 XX.XX.2.63/32 XX.XX.2.152/32 XX.XX.46.67/32 XX.XX.46.100/32 XX.XX.3.119/32 XX.XX.3.85/32 XX.XX.3.23/32 XX.XX.3.53/32 XX.XX.3.86/32 XX.XX.3.113/32 XX.XX.3.89/32 XX.XX.4.75/32 XX.XX.4.7/32 XX.XX.6.49/32 XX.XX.6.73/32 XX.XX.10.61/32 XX.XX.10.47/32 XX.XX.10.57/32 XX.XX.10.70/32 XX.XX.10.90/32 XX.XX.10.43/32 XX.XX.50.64/32 XX.XX.13.77/32 XX.XX.13.83/32 XX.XX.13.84/32 XX.XX.13.87/32 XX.XX.13.152/32 XX.XX.14.88/32 XX.XX.14.166/32 XX.XX.14.122/32 XX.XX.14.9/32 XX.XX.16.76/32 XX.XX.16.85/32 XX.XX.16.106/32 XX.XX.16.137/32 XX.XX.16.195/32 XX.XX.17.73/32 XX.XX.17.232/32 XX.XX.19.50/32 XX.XX.19.53/32 XX.XX.19.54/32 XX.XX.21.6/32 XX.XX.21.81/32 XX.XX.21.75/32 XX.XX.24.159/32 XX.XX.29.44/32 XX.XX.29.53/32 XX.XX.29.26/32 XX.XX.31.47/32 XX.XX.31.49/32 XX.XX.31.52/32 XX.XX.31.54/32 XX.XX.31.56/32 XX.XX.31.61/32 XX.XX.31.81/32 XX.XX.32.11/32 XX.XX.32.59/32 XX.XX.3

werter

@slepich

aclIpParseIpData: Bad host/IP: '10.' in '10.', flags=0 : (8) Name does not resolve 2021/08/02 03:54:43| FATAL: Bungled /usr/local/etc/squid/squid.conf line 65:

Что на 65-й строке? Похоже, что где-то неверный формат записи адреса. Перепроверьте.