Устроился недавно в компанию. Все вроде было нормально. Работает squid. А седня перестал squid пускать через ssl протокол. Теперь ни аськи ничего другое что идет по 443 порту не фурычит. Подскажит пожалуйста что может быть. И может ли это быть связано как то с утилитой kinit.часть конфига squid:
http_port 192.168.1.16:8080
http_port 192.168.0.16:8080
http_port 127.0.0.1:8080
cache_peer localhost parent 3128 0 no-query
hierarchy_stoplist cgi-bin ?
cache_mem 16 MB
maximum_object_size 10240 KB
cache_dir ufs /var/spool/squid 4096 16 256
dns_nameservers 81.18.139.130 81.4.197.254
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
auth_param basic children 5
auth_param basic realm Proxy-server TVS
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
half_closed_clients off
shutdown_lifetime 5 seconds
acl password proxy_auth REQUIRED
acl all src 0.0.0.0/0.0.0.0
acl ... src ...
.......................
acl ... src ...
# Адреса доступа к ICQ
acl icq_ip dst 64.12.0.0/16 205.188.0.0/16
# Прочие адреса доступа
# acl other_1 url_regex -i
acl other_2 url_regex -i choice.ntvplus.ru amfr.ru fhr.ru hockeynews-online.com hock.ru russian-hockey.ru hockey-kulichki.com football-hockey.ru hockey.nm.ru sport.kc.ru scalemodel-su.com/overtime izhstal.udm.ru kristall-saratov.ru neftekhimik.ru ahc-neftyanik.ru olimpiya.kirov.ru hctoros.ru pages.marsu.ru/iac/citu/ariada hscakbars.ru ak-bars.ru hk-universitet.nm.ru kanonir.com
acl other_3 url_regex -i www.overclockers.ru
# acl other_4 url_regex -i download.foxitsoftware.com
acl other_5 url_regex -i www.glazov-gov.ru lenta.ru susanin.udm.ru udm-info.ru regnum.ru federal.udm.ru gazetacentr.ru udm.vlasti.net kr-znamya.ru www.gfi-udm.ru
# acl other_6 url_regex -i webboard.land.ru
acl other_7 url_regex -i seva.ru/bbseva seva.ru/rock
#Правила для ограничения времени доступа
acl office_worktime time SMTWHFA 08:00-18:00
acl plastun_worktime time SMTWHFA 08:00-21:00
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
#
# Squid Blocks
# http://www.hklc.com/squidblock/
#
#acl squid_block_badlang url_regex -i "/etc/squid/squidblock/badlang.block.txt"
#acl squid_unblock_badlang url_regex -i "/etc/squid/squidblock/badlang.unblock.txt"
#acl squid_block_entertain url_regex -i "/etc/squid/squidblock/entertain.block.txt"
#acl squid_unblock_entertain url_regex -i "/etc/squid/squidblock/entertain.unblock.txt"
#acl squid_block_games url_regex -i "/etc/squid/squidblock/games.block.txt"
#acl squid_unblock_games url_regex -i "/etc/squid/squidblock/games.unblock.txt"
#acl squid_block_pirate url_regex -i "/etc/squid/squidblock/pirate.block.txt"
#acl squid_block_mp3 url_regex -i "/etc/squid/squidblock/mp3.block.txt"
#acl squid_unblock_pirate url_regex -i "/etc/squid/squidblock/pirate.unblock.txt"
acl squid_block_porn url_regex -i "/etc/squid/squidblock/porn.block.txt pron.block.txt"
acl squid_unblock_porn url_regex -i "/etc/squid/squidblock/porn.unblock.txt"
acl squid_block_banner url_regex -i "/etc/squid/squidblock/banner"
# Deny:
# Bad language or bad teste sites -
#http_access deny squid_block_badlang !squid_unblock_badlang
# Entertainment sites or chat, news -
#http_access deny squid_block_entertain !squid_unblock_entertain
# Online Games or Game sites -
#http_access deny squid_block_games !squid_unblock_games
# Pirated Software -
#http_access deny squid_block_pirate !squid_unblock_pirate
# Pirated Music -
#http_access deny squid_block_mp3
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
http_access allow nle ...
http_access allow nle icq_ip
http_access allow nle ...
http_access deny nle
http_reply_access allow all
icp_access allow all
