SQUID问题以及我的透明代理配置

蓝青

RH AS 3 准备做iptables+nat+squid 透明代理
SQUID可以运行,但提示no runing copy。。。

以下是我的

-----------/var/log/squid/cache.log
2005/02/27 00:01:21| Starting Squid Cache version 2.5.STABLE3 for i386-redhat-linux-gnu...
2005/02/27 00:01:21| Process ID 4214
2005/02/27 00:01:21| With 1024 file descriptors available
2005/02/27 00:01:21| DNS Socket created at 0.0.0.0, port 32770, FD 4
2005/02/27 00:01:21| Adding nameserver 202.102.199.68 from squid.conf
2005/02/27 00:01:21| Adding nameserver 202.102.192.68 from squid.conf
2005/02/27 00:01:21| User-Agent logging is disabled.
2005/02/27 00:01:21| Referer logging is disabled.
2005/02/27 00:01:21| Unlinkd pipe opened on FD 9
2005/02/27 00:01:21| Swap maxSize 102400 KB, estimated 7876 objects
2005/02/27 00:01:21| Target number of buckets: 393
2005/02/27 00:01:21| Using 8192 Store buckets
2005/02/27 00:01:21| Max Mem size: 102400 KB
2005/02/27 00:01:21| Max Swap size: 102400 KB
2005/02/27 00:01:21| Rebuilding storage in /var/spool/squid (CLEAN)
2005/02/27 00:01:21| Using Least Load store dir selection
2005/02/27 00:01:21| Set Current Directory to /var/spool/squid
2005/02/27 00:01:21| Loaded Icons.
2005/02/27 00:01:22| Accepting HTTP connections at 0.0.0.0, port 3128, FD 10.
2005/02/27 00:01:22| Accepting ICP messages at 0.0.0.0, port 3130, FD 11.
2005/02/27 00:01:22| WCCP Disabled.
2005/02/27 00:01:22| Ready to serve requests.
2005/02/27 00:01:22| Done scanning /var/spool/squid swaplog (0 entries)
2005/02/27 00:01:22| Finished rebuilding storage from disk.
2005/02/27 00:01:22|       0 Entries scanned
2005/02/27 00:01:22|       0 Invalid entries.
2005/02/27 00:01:22|       0 With invalid flags.
2005/02/27 00:01:22|       0 Objects loaded.
2005/02/27 00:01:22|       0 Objects expired.
2005/02/27 00:01:22|       0 Objects cancelled.
2005/02/27 00:01:22|       0 Duplicate URLs purged.
2005/02/27 00:01:22|       0 Swapfile clashes avoided.
2005/02/27 00:01:22|   Took 0.5 seconds (   0.0 objects/sec).
2005/02/27 00:01:22| Beginning Validation Procedure
2005/02/27 00:01:22|   Completed Validation Procedure
2005/02/27 00:01:22|   Validated 0 Entries
2005/02/27 00:01:22|   store_swap_size = 0k
2005/02/27 00:01:22| storeLateRelease: released 0 objects
2005/02/27 00:03:30| Preparing for shutdown after 0 requests
2005/02/27 00:03:30| Waiting 30 seconds for active connections to finish
2005/02/27 00:03:30| FD 10 Closing HTTP connection
2005/02/27 00:03:32| Shutting down...
2005/02/27 00:03:32| FD 11 Closing ICP connection
2005/02/27 00:03:32| Closing unlinkd pipe on FD 9
2005/02/27 00:03:32| storeDirWriteCleanLogs: Starting...
2005/02/27 00:03:32|   Finished. Wrote 0 entries.
2005/02/27 00:03:32|   Took 0.0 seconds (   0.0 entries/sec).
CPU Usage: 0.120 seconds = 0.060 user + 0.060 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 510
Memory usage for squid via mallinfo():
     total space in arena:   1980 KB
     Ordinary blocks:       1906 KB     4 blks
     Small blocks:           0 KB     6 blks
     Holding blocks:       200 KB     1 blks
     Free Small blocks:       0 KB
     Free Ordinary blocks:     73 KB
     Total in use:         2106 KB 106%
     Total free:           73 KB 4%
2005/02/27 00:03:32| Squid Cache (Version 2.5.STABLE3): Exiting normally.

-----------------sqid.conf-----

# NETWORK OPTIONS
# -----------------------------------------------------------------------------

# TAG: http_port
http_port 3128

# TAG: https_port

# TAG: ssl_unclean_shutdown
# ssl_unclean_shutdown off

# TAG: icp_port
icp_port 3130

# TAG: htcp_port
# htcp_port 4827

# TAG: mcast_groups
# none

# TAG: udp_incoming_address
# TAG: udp_outgoing_address
# udp_incoming_address 0.0.0.0
# udp_outgoing_address 255.255.255.255


# OPTIONS WHICH AFFECT THE NEIGHBOR SELECTION ALGORITHM
# -----------------------------------------------------------------------------

# TAG: cache_peer

# TAG: cache_peer_domain

# TAG: neighbor_type_domain

# TAG: icp_query_timeout      (msec)
# icp_query_timeout 0

# TAG: maximum_icp_query_timeout      (msec)
# maximum_icp_query_timeout 2000

# TAG: mcast_icp_query_timeout      (msec)
# mcast_icp_query_timeout 2000

# TAG: dead_peer_timeout      (seconds)
# dead_peer_timeout 10 seconds

# TAG: hierarchy_stoplist
hierarchy_stoplist cgi-bin ?
hierarchy_stoplist -i ^https:\\ ?
acl denyssl urlpath_regex -i ^https:\\

# TAG: no_cache
acl QUERY urlpath_regex -i cgi-bin \? \.asp \.php \.jsp \.cgi
#acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
no_cache deny denyssl

# OPTIONS WHICH AFFECT THE CACHE SIZE
# -----------------------------------------------------------------------------

# TAG: cache_mem      (bytes)
cache_mem 100 MB

# TAG: cache_swap_low      (percent, 0-100)
# TAG: cache_swap_high      (percent, 0-100)
cache_swap_low 90
cache_swap_high 95

# TAG: maximum_object_size      (bytes)
maximum_object_size 4096 KB

# TAG: minimum_object_size      (bytes)
#minimum_object_size 0 KB

# TAG: maximum_object_size_in_memory      (bytes)
# maximum_object_size_in_memory 8 KB

# TAG: ipcache_size      (number of entries)
# TAG: ipcache_low      (percent)
# TAG: ipcache_high      (percent)
ipcache_size 1024
ipcache_low 90
ipcache_high 95

# TAG: fqdncache_size      (number of entries)
fqdncache_size 1024

# TAG: cache_replacement_policy
# cache_replacement_policy lru

# TAG: memory_replacement_policy
# memory_replacement_policy lru


# LOGFILE PATHNAMES AND CACHE DIRECTORIES
# -----------------------------------------------------------------------------

# TAG: cache_dir
cache_dir ufs /var/spool/squid 100 16 256

# TAG: cache_access_log
cache_access_log /var/log/squid/access.log

# TAG: cache_log
cache_log /var/log/squid/cache.log

# TAG: cache_store_log
cache_store_log /var/log/squid/store.log

# TAG: cache_swap_log

# TAG: emulate_httpd_log      on|off
# emulate_httpd_log off

# TAG: log_ip_on_direct      on|off
# log_ip_on_direct on

# TAG: mime_table
# mime_table /etc/squid/mime.conf

# TAG: log_mime_hdrs      on|off
# log_mime_hdrs off

# TAG: useragent_log

# TAG: referer_log

# TAG: pid_filename
pid_filename /var/run/squid.pid

# TAG: debug_options
# debug_options ALL,1

# TAG: log_fqdn      on|off
# log_fqdn off

# TAG: client_netmask
# client_netmask 255.255.255.255


# OPTIONS FOR EXTERNAL SUPPORT PROGRAMS
# -----------------------------------------------------------------------------

# TAG: ftp_user
# ftp_user Squid@

# TAG: ftp_list_width
# ftp_list_width 32

# TAG: ftp_passive
# ftp_passive on

# TAG: ftp_sanitycheck
# ftp_sanitycheck on

# TAG: cache_dns_program
# cache_dns_program /usr/lib/squid/dnsserver

# TAG: dns_children
# dns_children 5

# TAG: dns_retransmit_interval
# dns_retransmit_interval 5 seconds

# TAG: dns_timeout
# dns_timeout 5 minutes

# TAG: dns_defnames      on|off
# dns_defnames off

# TAG: dns_nameservers
#dns_nameservers 202.102.199.68 202.102.192.68

# TAG: hosts_file
# hosts_file /etc/hosts

# TAG: diskd_program
# diskd_program /usr/lib/squid/diskd

# TAG: unlinkd_program
# unlinkd_program /usr/lib/squid/unlinkd

# TAG: pinger_program
# pinger_program /usr/lib/squid/pinger

# TAG: redirect_program

# TAG: redirect_children
# redirect_children 5

# TAG: redirect_rewrites_host_header
# redirect_rewrites_host_header on

# TAG: redirector_access

# TAG: auth_param
#auth_param digest program <uncomment and complete this line>
#auth_param digest children 5
#auth_param digest realm Squid proxy-caching web server
#auth_param digest nonce_garbage_interval 5 minutes
#auth_param digest nonce_max_duration 30 minutes
#auth_param digest nonce_max_count 50
#auth_param ntlm program <uncomment and complete this line to activate>
#auth_param ntlm children 5
#auth_param ntlm max_challenge_reuses 0
#auth_param ntlm max_challenge_lifetime 2 minutes
#auth_param basic program <uncomment and complete this line>
#auth_param basic children 5
#auth_param basic realm Squid proxy-caching web server
#auth_param basic credentialsttl 2 hours

# TAG: authenticate_cache_garbage_interval
# authenticate_cache_garbage_interval 1 hour

# TAG: authenticate_ttl
# authenticate_ttl 1 hour

# TAG: authenticate_ip_ttl
# authenticate_ip_ttl 0 seconds

# TAG: external_acl_type

# OPTIONS FOR TUNING THE CACHE
# -----------------------------------------------------------------------------

# TAG: wais_relay_host
# TAG: wais_relay_port
# wais_relay_port 0

# TAG: request_header_max_size      (KB)
# request_header_max_size 10 KB

# TAG: request_body_max_size      (KB)
# request_body_max_size 0 KB

# TAG: refresh_pattern

#Suggested default:
refresh_pattern ^ftp:            1440      20%      10080
refresh_pattern ^gopher:      1440      0%      1440
refresh_pattern .            0      20%      4320

# TAG: quick_abort_min      (KB)
# TAG: quick_abort_max      (KB)
# TAG: quick_abort_pct      (percent)
# quick_abort_min 16 KB
# quick_abort_max 16 KB
# quick_abort_pct 95

# TAG: negative_ttl      time-units
# negative_ttl 5 minutes

# TAG: positive_dns_ttl      time-units
# positive_dns_ttl 6 hours

# TAG: negative_dns_ttl      time-units
# negative_dns_ttl 5 minutes

# TAG: range_offset_limit      (bytes)
# range_offset_limit 0 KB


# TIMEOUTS
# -----------------------------------------------------------------------------

# TAG: connect_timeout      time-units
connect_timeout 1 minutes

# TAG: peer_connect_timeout      time-units
peer_connect_timeout 30 seconds

# TAG: read_timeout      time-units
#read_timeout 15 minutes

# TAG: request_timeout
request_timeout 2 minutes

# TAG: persistent_request_timeout
persistent_request_timeout 1 minute

# TAG: client_lifetime      time-units
# client_lifetime 1 day

# TAG: half_closed_clients
# half_closed_clients on

# TAG: pconn_timeout
# pconn_timeout 120 seconds

# TAG: ident_timeout
# ident_timeout 10 seconds

# TAG: shutdown_lifetime      time-units
# shutdown_lifetime 30 seconds


# ACCESS CONTROLS
# -----------------------------------------------------------------------------

# TAG: acl
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80            # http
acl Safe_ports port 21            # ftp
acl Safe_ports port 443 563      # https, snews
acl Safe_ports port 70            # gopher
acl Safe_ports port 210            # wais
acl Safe_ports port 1025-65535      # unregistered ports
acl Safe_ports port 280            # http-mgmt
acl Safe_ports port 488            # gss-http
acl Safe_ports port 591            # filemaker
acl Safe_ports port 777            # multiling http
acl CONNECT method CONNECT
acl inside src 192.192.192.0/24
# TAG: http_access
# http_access deny all
http_access allow inside
http_access allow all
#
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
#http_access deny to_localhost

# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

#http_access allow localhost
http_access deny all

# TAG: http_reply_access
# http_reply_access allow all
#
#Recommended minimum configuration:
#
# Insert your own rules here.
#
#
# and finally allow by default
http_reply_access allow all

# TAG: icp_access
# icp_access deny all
#
#Allow ICP queries from everyone
#icp_access allow all

# TAG: miss_access
# miss_access allow all

# TAG: cache_peer_access

# TAG: ident_lookup_access
# ident_lookup_access deny all

# TAG: tcp_outgoing_tos

# TAG: tcp_outgoing_address

# TAG: reply_body_max_size      bytes allow|deny acl acl...
# reply_body_max_size 0 allow all


# ADMINISTRATIVE PARAMETERS
# -----------------------------------------------------------------------------

# TAG: cache_mgr
cache_mgr [email protected]

# TAG: cache_effective_user
# TAG: cache_effective_group
cache_effective_user squid
cache_effective_group squid

# TAG: visible_hostname
visible_hostname www.chnet8.net

# TAG: unique_hostname

# TAG: hostname_aliases


# OPTIONS FOR THE CACHE REGISTRATION SERVICE
# -----------------------------------------------------------------------------
# TAG: announce_period
# announce_period 0


# TAG: announce_host
# TAG: announce_file
# TAG: announce_port
# announce_host tracker.ircache.net
# announce_port 3131


# HTTPD-ACCELERATOR OPTIONS
# -----------------------------------------------------------------------------

# TAG: httpd_accel_host
# TAG: httpd_accel_port
httpd_accel_host www.chnet8.net
httpd_accel_port 80

# TAG: httpd_accel_single_host      on|off
# httpd_accel_single_host off

# TAG: httpd_accel_with_proxy      on|off
httpd_accel_with_proxy on

# TAG: httpd_accel_uses_host_header      on|off
httpd_accel_uses_host_header on

# MISCELLANEOUS
# -----------------------------------------------------------------------------

# TAG: dns_testnames
# dns_testnames netscape.com internic.net nlanr.net microsoft.com

# TAG: logfile_rotate
logfile_rotate 4

# TAG: append_domain
# append_domain .yourdomain.com

# TAG: tcp_recv_bufsize      (bytes)
# tcp_recv_bufsize 0 bytes

# TAG: err_html_text

# TAG: deny_info

# TAG: memory_pools      on|off
# memory_pools on

# TAG: memory_pools_limit      (bytes)

# TAG: forwarded_for      on|off
forwarded_for off

# TAG: log_icp_queries      on|off
# log_icp_queries on

# TAG: icp_hit_stale      on|off
# icp_hit_stale off

# TAG: minimum_direct_hops
# minimum_direct_hops 4

# TAG: minimum_direct_rtt
# minimum_direct_rtt 400

# TAG: cachemgr_passwd

# TAG: store_avg_object_size      (kbytes)
# store_avg_object_size 13 KB

# TAG: store_objects_per_bucket
# store_objects_per_bucket 20

# TAG: client_db      on|off
## client_db on

# TAG: netdb_low
# TAG: netdb_high
# netdb_low 900
# netdb_high 1000

# TAG: netdb_ping_period
# netdb_ping_period 5 minutes

# TAG: query_icmp      on|off
# query_icmp off

# TAG: test_reachability      on|off
# test_reachability off

# TAG: buffered_logs      on|off
# buffered_logs off

# TAG: reload_into_ims      on|off
# reload_into_ims off

# TAG: always_direct

# TAG: never_direct

# TAG: header_access

# TAG: header_replace

# TAG: icon_directory
# icon_directory /usr/share/squid/icons

# TAG: error_directory
# error_directory /etc/squid/errors

# TAG: minimum_retry_timeout      (seconds)
# minimum_retry_timeout 5 seconds

# TAG: maximum_single_addr_tries
# maximum_single_addr_tries 3

# TAG: snmp_port
# snmp_port 0

# TAG: snmp_access
# snmp_access deny all

# TAG: snmp_incoming_address
# snmp_incoming_address 0.0.0.0
# snmp_outgoing_address 255.255.255.255

# TAG: as_whois_server
# as_whois_server whois.ra.net
# as_whois_server whois.ra.net

# TAG: wccp_router
# wccp_router 0.0.0.0

# TAG: wccp_version
# wccp_version 4

# TAG: wccp_incoming_address
# TAG: wccp_outgoing_address
# wccp_incoming_address 0.0.0.0
# wccp_outgoing_address 255.255.255.255


# DELAY POOL PARAMETERS (all require DELAY_POOLS compilation option)
# -----------------------------------------------------------------------------

# TAG: delay_pools
# delay_pools 0

# TAG: delay_class

# TAG: delay_access

# TAG: delay_parameters

# TAG: delay_initial_bucket_level      (percent, 0-100)
# delay_initial_bucket_level 50

# TAG: incoming_icp_average
# TAG: incoming_http_average
# TAG: incoming_dns_average
# TAG: min_icp_poll_cnt
# TAG: min_dns_poll_cnt
# TAG: min_http_poll_cnt
# incoming_icp_average 6
# incoming_http_average 4
# incoming_dns_average 4
# min_icp_poll_cnt 8
# min_dns_poll_cnt 8
# min_http_poll_cnt 8

# TAG: max_open_disk_fds
# max_open_disk_fds 0

# TAG: offline_mode
# offline_mode off

# TAG: uri_whitespace
# uri_whitespace strip

# TAG: broken_posts

# TAG: mcast_miss_addr
# mcast_miss_addr 255.255.255.255

# TAG: mcast_miss_ttl
# mcast_miss_ttl 16

# TAG: mcast_miss_port
# mcast_miss_port 3135

# TAG: mcast_miss_encode_key
# mcast_miss_encode_key XXXXXXXXXXXXXXXX

# TAG: nonhierarchical_direct
# nonhierarchical_direct on

# TAG: prefer_direct
# prefer_direct off

# TAG: strip_query_terms
# strip_query_terms on

# TAG: coredump_dir
coredump_dir /var/spool/squid

# TAG: redirector_bypass
# redirector_bypass off

# TAG: ignore_unknown_nameservers
# ignore_unknown_nameservers on

# TAG: digest_generation
# digest_generation on

# TAG: digest_bits_per_entry
# digest_bits_per_entry 5

# TAG: digest_rebuild_period      (seconds)
# digest_rebuild_period 1 hour

# TAG: digest_rewrite_period      (seconds)
# digest_rewrite_period 1 hour

# TAG: digest_swapout_chunk_size      (bytes)
# digest_swapout_chunk_size 4096 bytes

# TAG: digest_rebuild_chunk_percentage      (percent, 0-100)
# digest_rebuild_chunk_percentage 10

# TAG: chroot

# TAG: client_persistent_connections
# TAG: server_persistent_connections
# client_persistent_connections on
# server_persistent_connections on

# TAG: pipeline_prefetch
# pipeline_prefetch off

# TAG: extension_methods

# TAG: request_entities
# request_entities off

# TAG: high_response_time_warning      (msec)
# high_response_time_warning 0

# TAG: high_page_fault_warning
# high_page_fault_warning 0

# TAG: high_memory_warning
# high_memory_warning 0

# TAG: store_dir_select_algorithm
# store_dir_select_algorithm least-load

# TAG: forward_log

# TAG: ie_refresh      on|off
# ie_refresh off

# TAG: vary_ignore_expire      on|off
# vary_ignore_expire off

# TAG: sleep_after_fork      (microseconds)
# sleep_after_fork 0

------------/etc/rc.d/rc.local-----------------------------------#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don't
# want to do the full Sys V style init stuff.

touch /var/lock/subsys/local

echo "1" > /proc/sys/net/ipv4/ip_forward
/sbin/iptables -t nat -A POSTROUTING -j MASQUERADE
iptables -t nat -A PREROUTING -i eth0 -p tcp -s 192.192.192.0/24 --dport 80 -j REDIRECT --to-ports 3128




我只配置了squid和rc.local..请问我这样可以代理内网的机器上网且实现透明代理吗？？？？高手指点！！！