squid terminates from fatal error help quick

sharadshankar · 02-16-2006, 07:10 PM

Alright I'm almost finished setting up squid however when running it, it terminates abnormally. Here is the output when i do

Quote:

/etc/init.d/squid restart

Quote:

Restarting proxy server: 2006/02/16 19:52:47| ACL name '192.168.15.101/255.255.255.0' not defined!
FATAL: Bungled squid.conf line 5: http_access allow 192.168.15.101/255.255.255.0Squid Cache (Version 2.5.STABLE10): Terminated abnormally.
squid.

Here is my config file.

Quote:

http_port 8080
cache_mem 16 MB
cache_dir ufs /home/admin/cache/ 200 16 256
redirect_rewrites_host_header off
http_access allow 192.168.15.101/255.255.255.0
cache_effective_user admin
cachemgr_passwd my-secret-pass all
buffered_logs on

I'm using this website as a guide and tweak it a little bit.
http://howtos.linux.com/guides/solrh...28sec232.shtml

gilead · 02-16-2006, 07:49 PM

The process they follow in that tutorial is to create an access control list (acl) and then define whether to allow or deny access to anything that matches the acl. I don't have a box here to test it on, but try something like:

Code:

acl lanhost 192.168.15.101/255.255.255.0
http_access allow lanhost

sharadshankar · 02-16-2006, 08:18 PM

alright I kind of got it working. Now, it doesn't have a fatal error. Your suggestion was right expcet you're suppose to put src after lanhost. Here is what I get now.
Config file

Quote:

http_port 8080
cache_mem 16 MB
cache_dir ufs /home/admin/cache/ 200 16 256
acl lanhost src 192.168.15.101/255.255.255.0
acl localhost src 127.0.0.1/255.255.255.255
acl all src 0.0.0.0/0.0.0.0
http_access allow lanhost
http_access deny all
cache_effective_user admin
buffered_logs on

Quote:

Restarting proxy server: 2006/02/16 21:14:28| aclParseIpData: WARNING: Netmask masks away part of the specified IP in '192.168.15.101/255.255.255.0'
squid.

What is that error?

gilead · 02-16-2006, 08:26 PM

Oops, sorry about leaving off the src.

The error means that the netmask is wrong. If you just want to allow the 192.168.15.101 address, try it as 192.168.15.101/255.255.255.255 or as just 192.168.15.101, if you want to allow all of the PCs in the subnet 192.168.15.0, try 192.168.15.0/255.255.255.0. I hope that works - I'm still not at a PC where I can try it myself

sharadshankar · 02-16-2006, 09:12 PM

Thanks man. It starts up now just fine. However, if i try to connect to the proxy via firefox from the allowed ip it doesn't respond. I guess there is something messed up during startup. On the installation they tell how to debug it but I'm running ubuntu and I don't know how to display that. Here is the link. http://http://squid-docs.sourceforge...html/x897.html
I also found this cgiproxy which would work but having trouble installing it. Has anyone done this before? Here is the cgi proxy link. http://www.jmarshall.com/tools/cgiproxy/

gilead · 02-16-2006, 09:30 PM

I'm not sure what is causing that - what errors are being displayed by Firefox? There may be some information in the logs also. My squid logs to the /var/log/squid directory, in the files access.log, cache.log and store.log.

sharadshankar · 02-16-2006, 09:45 PM

here is the log file when i start squid.

Quote:

2006/02/16 22:38:12| Starting Squid Cache version 2.5.STABLE10 for i386-debian-linux-gnu...
2006/02/16 22:38:12| Process ID 5231
2006/02/16 22:38:12| With 1024 file descriptors available
2006/02/16 22:38:12| DNS Socket created at 0.0.0.0, port 33733, FD 6
2006/02/16 22:38:12| Adding nameserver 68.87.73.242 from /etc/resolv.conf
2006/02/16 22:38:12| Adding nameserver 68.87.71.226 from /etc/resolv.conf
2006/02/16 22:38:12| User-Agent logging is disabled.
2006/02/16 22:38:12| Referer logging is disabled.
2006/02/16 22:38:12| Unlinkd pipe opened on FD 11
2006/02/16 22:38:12| Swap maxSize 204800 KB, estimated 15753 objects
2006/02/16 22:38:12| Target number of buckets: 787
2006/02/16 22:38:12| Using 8192 Store buckets
2006/02/16 22:38:12| Max Mem size: 8192 KB
2006/02/16 22:38:12| Max Swap size: 204800 KB
2006/02/16 22:38:12| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2006/02/16 22:38:12| Rebuilding storage in /home/admin/cache (DIRTY)
2006/02/16 22:38:12| Using Least Load store dir selection
2006/02/16 22:38:12| Current Directory is /
2006/02/16 22:38:12| Loaded Icons.
2006/02/16 22:38:12| Accepting HTTP connections at 0.0.0.0, port 8080, FD 12.
2006/02/16 22:38:12| Accepting ICP messages at 0.0.0.0, port 3130, FD 13.
2006/02/16 22:38:12| HTCP Disabled.
2006/02/16 22:38:12| WCCP Disabled.
2006/02/16 22:38:12| Ready to serve requests.
2006/02/16 22:38:13| Done scanning /home/admin/cache (0 entries)
2006/02/16 22:38:13| Finished rebuilding storage from disk.
2006/02/16 22:38:13| 0 Entries scanned
2006/02/16 22:38:13| 0 Invalid entries.
2006/02/16 22:38:13| 0 With invalid flags.
2006/02/16 22:38:13| 0 Objects loaded.
2006/02/16 22:38:13| 0 Objects expired.
2006/02/16 22:38:13| 0 Objects cancelled.
2006/02/16 22:38:13| 0 Duplicate URLs purged.
2006/02/16 22:38:13| 0 Swapfile clashes avoided.
2006/02/16 22:38:13| Took 0.5 seconds ( 0.0 objects/sec).
2006/02/16 22:38:13| Beginning Validation Procedure
2006/02/16 22:38:13| Completed Validation Procedure
2006/02/16 22:38:13| Validated 0 Entries
2006/02/16 22:38:13| store_swap_size = 0k
2006/02/16 22:38:14| storeLateRelease: released 0 objects

gilead · 02-16-2006, 10:11 PM

OK, there are no errors in that output. If the proxy settings are correct in your browser, it should be returning something. Can you try manually connecting to the proxy server. For example, if the proxy is proxy.yourdomain.com and the port is 8080:

Code:

telnet proxy.yourdomain.com 8080
GET /

What do you see as the output for this?

sharadshankar · 02-16-2006, 10:34 PM

alright it connects to the proxy but it doesnt do anything after that. Here is what it says.

Quote:

Trying 192.168.15.100...
Connected to 192.168.15.100.
Escape character is '^]'.

After i type GET / it wont do anyhting.

gilead · 02-16-2006, 11:03 PM

Can you check the permissions/ownership on squid's cache directory? It sounds as though it hasn't started up correctly, although there should be error messages.

sharad · 02-16-2006, 11:25 PM

Try one thing,add one acl statement in the squid.conf file

acl allow_net src 192.168.15.101

and then add the following

http_access allow allow_net

it should work.

if not,let me know your total squid configuration.

Regards,
sharad.