我对squid3有一个奇怪的问题。它通常正常工作,我可以通过代理访问大多数网站。但有些网站喜欢
google.com
bing.com
似乎被阻止但并非总是如此。重新启动squid3似乎没有帮助或清除/ var / spool / squid3(缓存)目录。
如果我登录运行squid3并且
的机器wget --no-proxy google.com
然后没有问题,但是如果我通过代理它永远不会响应。大多数其他网站都可以访问,包括stackoverflow.com,我现在正通过代理使用它。知道google.com和bing.com可能有什么特别之处,以便squid3对待它们的方式不同,squid3 conf文件中是否有任何可能与此类行为相关的设置。
答案 0 :(得分:26)
我有同样的问题。我的问题是由ipv6连接问题引起的。 Squid3支持ipv6和ipv4协议。如果您的服务器无法连接ipv6,而远程服务器更喜欢ipv6,那么squid也更喜欢ipv6而无法检索访问日志等数据。
首先尝试使用ping进行ipv6连接。
ping6 ivp6.google.com
如果ping没有响应,请先让squid3为prefer ipv4配置。
在squid.conf中搜索
TAG: dns_v4_first
之后
#Default:
#dns_v4_first off
添加
dns_v4_first on
然后重启squid3服务器
service squid3 restart
这是修复前的访问日志。
1352760882.854 796 88.my.ip.108 TCP_MISS/000 0 GET http://connect.facebook.net/en_US/all.js [squiduser] DIRECT/connect.facebook.net -
1352760885.717 69 88.my.ip.108 TCP_MISS/000 0 GET http://www.google.com.tr/complete/search? [squiduser] DIRECT/www.google.com.tr -
1352760886.250 13 88.my.ip.108 TCP_MISS/000 0 GET http://www.google.com.tr/complete/search? [squiduser] DIRECT/www.google.com.tr -
1352760887.011 369 88.my.ip.108 TCP_MISS/000 0 GET http://www.google.com.tr/complete/search? [squiduser] DIRECT/www.google.com.tr -
1352760887.989 42 88.my.ip.108 TCP_MISS/000 0 GET http://www.google.com.tr/complete/search? [squiduser] DIRECT/www.google.com.tr -
1352760888.984 75 88.my.ip.108 TCP_MISS/000 0 GET http://www.google.com.tr/complete/search? [squiduser] DIRECT/www.google.com.tr -
1352760897.351 8165 88.my.ip.108 TCP_MISS/000 0 GET http://www.google.com.tr/search? [squiduser] DIRECT/www.google.com.tr -
1352761072.531 10970 88.my.ip.108 TCP_MISS/000 0 GET http://www.google-analytics.com/__utm.gif? [squiduser] DIRECT/www.google-analytics.com -
1352761072.533 10272 88.my.ip.108 TCP_MISS/000 0 GET http://apis.google.com/js/plusone.js [squiduser] DIRECT/apis.google.com -
1352761072.535 10262 88.my.ip.108 TCP_MISS/000 0 GET http://connect.facebook.net/en_US/all.js [squiduser] DIRECT/connect.facebook.net -
这是我的完整鱿鱼配置。我使用squid作为匿名代理服务器。
2012/11/14 00:09:02| Processing Configuration File: /etc/squid3/squid.conf (depth 0)
2012/11/14 00:09:02| Processing: auth_param basic program /usr/lib/squid3/ncsa_auth /etc/squid3/squid.passwd
2012/11/14 00:09:02| Processing: auth_param basic children 5
2012/11/14 00:09:02| Processing: auth_param basic realm Squid proxy-caching web server
2012/11/14 00:09:02| Processing: auth_param basic credentialsttl 2 hours
2012/11/14 00:09:02| Processing: acl manager proto cache_object
2012/11/14 00:09:02| Processing: acl localhost src 127.0.0.1/32 ::1
2012/11/14 00:09:02| Processing: acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
2012/11/14 00:09:02| Processing: acl CONNECT method CONNECT
2012/11/14 00:09:02| Processing: http_access allow manager localhost
2012/11/14 00:09:02| Processing: http_access deny manager
2012/11/14 00:09:02| Processing: http_access allow localhost
2012/11/14 00:09:02| Processing: acl ncsaauth proxy_auth REQUIRED
2012/11/14 00:09:02| Processing: http_access allow ncsaauth
2012/11/14 00:09:02| Processing: http_access deny all
2012/11/14 00:09:02| Processing: http_port 8880
2012/11/14 00:09:02| Processing: coredump_dir /var/spool/squid3
2012/11/14 00:09:02| Processing: refresh_pattern ^ftp: 1440 20% 10080
2012/11/14 00:09:02| Processing: refresh_pattern ^gopher: 1440 0% 1440
2012/11/14 00:09:02| Processing: refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
2012/11/14 00:09:02| Processing: refresh_pattern (Release|Packages(.gz)*)$ 0 20% 2880
2012/11/14 00:09:02| Processing: refresh_pattern . 0 20% 4320
2012/11/14 00:09:02| Processing: dns_v4_first on
2012/11/14 00:09:02| Processing: forwarded_for delete
2012/11/14 00:09:02| Processing: request_header_access Allow allow all
2012/11/14 00:09:02| Processing: request_header_access Authorization allow all
2012/11/14 00:09:02| Processing: request_header_access WWW-Authenticate allow all
2012/11/14 00:09:02| Processing: request_header_access Proxy-Authorization allow all
2012/11/14 00:09:02| Processing: request_header_access Proxy-Authenticate allow all
2012/11/14 00:09:02| Processing: request_header_access Cache-Control allow all
2012/11/14 00:09:02| Processing: request_header_access Content-Encoding allow all
2012/11/14 00:09:02| Processing: request_header_access Content-Length allow all
2012/11/14 00:09:02| Processing: request_header_access Content-Type allow all
2012/11/14 00:09:02| Processing: request_header_access Date allow all
2012/11/14 00:09:02| Processing: request_header_access Expires allow all
2012/11/14 00:09:02| Processing: request_header_access Host allow all
2012/11/14 00:09:02| Processing: request_header_access If-Modified-Since allow all
2012/11/14 00:09:02| Processing: request_header_access Last-Modified allow all
2012/11/14 00:09:02| Processing: request_header_access Location allow all
2012/11/14 00:09:02| Processing: request_header_access Pragma allow all
2012/11/14 00:09:02| Processing: request_header_access Accept allow all
2012/11/14 00:09:02| Processing: request_header_access Accept-Charset allow all
2012/11/14 00:09:02| Processing: request_header_access Accept-Encoding allow all
2012/11/14 00:09:02| Processing: request_header_access Accept-Language allow all
2012/11/14 00:09:02| Processing: request_header_access Content-Language allow all
2012/11/14 00:09:02| Processing: request_header_access Mime-Version allow all
2012/11/14 00:09:02| Processing: request_header_access Retry-After allow all
2012/11/14 00:09:02| Processing: request_header_access Title allow all
2012/11/14 00:09:02| Processing: request_header_access Connection allow all
2012/11/14 00:09:02| Processing: request_header_access Proxy-Connection allow all
2012/11/14 00:09:02| Processing: request_header_access User-Agent allow all
2012/11/14 00:09:02| Processing: request_header_access Cookie allow all
2012/11/14 00:09:02| Processing: request_header_access All deny all
答案 1 :(得分:2)
请记住,dns_v4_first仅适用于较新的squid3版本。 如果你运行例如debian6服务器,你有squid3-3.1.6没有这个配置开关。
对于那些旧版本,您必须编辑配置行
tcp_outgoing_address SERVERIP all
其中SERVERIP是服务器的IP。