Стоит Ubuntu Server прозрачное проксирование через сквид. Такие сайты, как sadmin.pp.ua, forum.xakep.ru, www.etextlib.ru через Squid не открываются. Что не так?Большинство других сайтов открывается хорошо.
ошибка в браузере:
При получении URL http://forum.xakep.ru/ произошла следующая ошибка
Соединение с 176.9.46.47 не удалось
Система вернула: (110) Connection timed out
Удаленный узел или сеть недоступен. Повторите запрос позднее
grep forum.xakep|tail выводит следующее:
1352695211.066 179099 192.168.0.111 TCP_MISS/504 1638 GET http://forum.xakep.ru/ - DIRECT/178.248.232.55 text/html
конфиг сквида:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl localnet src 192.168.0.0/24 # RFC1918 possible internal network
acl admin_vip src "/etc/squid/admin_vip"
acl bad_users src "/etc/squid/bad_users"
acl techno src "/etc/squid/techno"
acl users src "/etc/squid/users"
acl blacklist url_regex "/etc/squid/badsites"
acl stop_list dstdomain "/etc/squid/stop_list"
acl rashireniya urlpath_regex "/etc/squid/rashireniya"
acl badtime1 time 08:00-12:00
acl badtime2 time 13:00-17:00
acl icqport port 5190
acl torrents port 1025-65535
acl QUERY urlpath_regex cgi-bin \? /? auth
#
acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 873 # rsync
acl SSL_ports port 1025-65535 #torrent
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow admin_vip
http_access deny techno stop_list badtime1
http_access deny users stop_list badtime1
http_access deny bad_users stop_list badtime1
http_access deny techno stop_list badtime2
http_access deny users stop_list badtime2
http_access deny bad_users stop_list badtime2
http_access deny techno blacklist
http_access deny users blacklist
http_access deny bad_users blacklist
http_access deny techno rashireniya
http_access deny users rashireniya
http_access deny bad_users rashireniya
http_access deny techno CONNECT icqport
http_access deny users CONNECT icqport
http_access deny bad_users CONNECT icqport
http_access deny techno CONNECT torrents
http_access deny users CONNECT torrents
http_access deny bad_users CONNECT torrents
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128 transparent
tcp_outgoing_address 0.0.0.0
hierarchy_stoplist cgi-bin ?
cache_mem 42 MB
maximum_object_size_in_memory 16 KB
maximum_object_size 4096 KB
access_log /var/log/squid/access.log squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern (Release|Package(.gz)*)$ 0 20% 2880
refresh_pattern . 0 20% 4320
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
server_http11 on
httpd_suppress_version_string off
httpd_accel_no_pmtu_disc on
icp_port 0
udp_outgoing_address 0.0.0.0
error_directory /usr/share/squid/errors/Russian-1251
dns_nameservers 8.8.8.8 62.33.38.3 62.33.39.3
memory_pools off
uri_whitespace allow
coredump_dir /var/spool/squid
cache_dir ufs /var/spool/squid 300 16 256
#cache_peer 127.0.0.1 parent 8080 0 no-query default no-digest no-delay
#cache_peer_access 127.0.0.1 allow all
#acl Scan_HTTP proto HTTP
#never_direct allow Scan_HTTP
acl ftp proto FTP
always_direct allow ftp
no_cache deny QUERY
#never_direct allow all
