On 3/08/2014 3:07 a.m., nuhll wrote:
im not able to fix it.
Normal websites work. But i cant get it to cache (or even allow access to
Windows Update or Kaspersky).
Whats i am doin wrong?
2014/08/02 17:05:35| The request GET
http://dnl-16.geo.kaspersky.com/updaters/updater.xml is DENIED, because it
matched 'localhost'
2014/08/02 17:05:35| The reply for GET
http://dnl-16.geo.kaspersky.com/updaters/updater.xml is ALLOWED, because it
matched 'localhost'
2014/08/02 17:06:32| The request CONNECT 62.128.100.41:443 is DENIED,
because it matched 'localhost'
2014/08/02 17:06:32| The reply for CONNECT 62.128.100.41:443 is ALLOWED,
because it matched 'localhost'
014/08/02 17:07:07| The request CONNECT sls.update.microsoft.com:443 is
DENIED, because it matched 'localhost'
2014/08/02 17:07:07| The reply for CONNECT sls.update.microsoft.com:443 is
ALLOWED, because it matched 'localhost'
So what access.log linesmatch these transactions?
my config atm:
debug_options ALL,1 33,2
acl localnet src 192.168.0.0
acl all src 0.0.0.0
1) you are defining the entire Internet to be a single IP address
0.0.0.0 ... which is invalid.
This should be:
acl all src all
acl localhost src 127.0.0.1
access_log daemon:/var/log/squid/access.test.log squid
http_port 192.168.0.1:3128 transparent
cache_dir ufs /daten/squid 10 16 256
range_offset_limit 100 MB windowsupdate
maximum_object_size 6000 MB
quick_abort_min -1
# Add one of these lines for each of the websites you want to cache.
refresh_pattern -i
microsoft.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 432000
reload-into-ims
refresh_pattern -i
windowsupdate.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80%
432000 reload-into-ims
refresh_pattern -i
windows.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80% 432000
reload-into-ims
refresh_pattern -i
geo.kaspersky.com/.*\.(cab|exe|ms[i|u|f]|[ap]sf|wm[v|a]|dat|zip) 4320 80%
432000 reload-into-ims
# DONT MODIFY THESE LINES
refresh_pattern \^ftp: 144020% 10080
refresh_pattern \^gopher:14400% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
acl kaspersky dstdomain .kaspersky.com
acl windowsupdate dstdomain windowsupdate.microsoft.com
acl windowsupdate dstdomain .update.microsoft.com
acl windowsupdate dstdomain download.windowsupdate.com
acl windowsupdate dstdomain redir.metaservices.microsoft.com
acl windowsupdate dstdomain images.metaservices.microsoft.com
acl windowsupdate dstdomain c.microsoft.com
acl windowsupdate dstdomain www.download.windowsupdate.com
acl windowsupdate dstdomain wustat.windows.com
acl windowsupdate dstdomain crl.microsoft.com
acl windowsupdate dstdomain sls.microsoft.com
acl windowsupdate dstdomain productactivation.one.microsoft.com
acl windowsupdate dstdomain ntservicepack.microsoft.com
acl CONNECT method CONNECT
acl wuCONNECT dstdomain www.update.microsoft.com
acl wuCONNECT dstdomain sls.microsoft.com
http_access allow kaspersky localnet
http_access allow CONNECT wuCONNECT localnet
http_access allow windowsupdate localnet
http_access allow localnet
http_access allow localhost
The above rule set is equivalent to:
http_access allow localhost
http_access deny !localnet
http_access allow all
Amos
