slacky.eu

Ho installato tempo fa, su una slackware 10.2, il pacchetto
squid-2.5.STABLE13-i486-1all che se non erro ho preso da linuxpackages
Ho installato questi giorni, su una slackware 11.0, il pacchetto
squid-2.6.stable6-i486-1sl preso da slacky

Mi interessa installarci un redirector (SquidClamAV redirector) per per collegare l'antivirus.
Sulla prima inst tutto ok.
Sulla seconda con grande sorpresa ho visto che la direttiva redirect_program e le correlate non esistono in squid.conf
Poco male, le ho aggiunte a mano e squid le ha digerite, infatti all'avvio carica le istanze di SquidClamAV.
Dai log però mi pare che non gli passa alcuna richiesta, tant'è vero che i virus me li fa scaricare tranquillamente.
SquidClamAV lanciato a riga di programma funziona e riconosce i virus.

Ecco i due file di configurazione.
Il funzionante:

Codice: Seleziona tutto

http_port 8080
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
redirect_program /usr/sbin/SquidClamAV_Redirector.py -c /etc/squid/SquidClamAV_Redirector.conf
redirect_children 5
acl localhost src 127.0.0.1/255.255.255.255
redirector_access deny localhost
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
acl ftp proto FTP
http_access allow all
http_reply_access allow all
icp_access allow all
cache_effective_user squid
httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
always_direct allow ftp
coredump_dir /var/log/squid/cache

Il non funzionante

Codice: Seleziona tutto

http_port 3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
access_log /var/log/squid/logs/access.log squid
acl localhost src 127.0.0.1/255.255.255.255
redirect_program /usr/sbin/SquidClamAV_Redirector.py -c /etc/squid/SquidClamAV_Redirector.conf
redirect_children 5
redirector_access deny localhost
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
http_access allow all
http_reply_access allow all
icp_access allow all
cache_effective_user squid
cache_effective_group squid
coredump_dir /var/log/squid/cache

A me sembrano abbastanza simili.

Pensate che cambiando squid con squid-2.6.STABLE4-i486-1ztm di linuxpackages possa funzionare?

Grazie,
01

slacky.eu

squid redirector... slack 10.2 si, slack 11 no

squid redirector... slack 10.2 si, slack 11 no