Here's my problem: I'm trying to troubleshoot my ACLs and I can't
quite comprehend what's happening. According to log file it seems
like squid is loosing client IP in the process of ACL evaluation. Log
entries are below. Can somebody explain to me what's happening?
squid.conf follows this excerpt from log file. On top of that - that's
squid-2.5.STABLE3-6.3E.16 on redhat AS3.
<log>
2006/03/31 15:58:44| aclCheckFast: list: 0x86bb2f8
2006/03/31 15:58:44| aclMatchAclList: checking all
2006/03/31 15:58:44| aclMatchAcl: checking 'acl all src
1.1.1.1/255.255.255.255'
2006/03/31 15:58:44| aclMatchIp: '192.168.1.6' NOT found
2006/03/31 15:58:44| aclMatchAclList: no match, returning 0
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: (nil)
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: (nil)
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: (nil)
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: (nil)
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: (nil)
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: (nil)
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: (nil)
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: (nil)
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: (nil)
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 1
2006/03/31 15:58:44| aclCheckFast: list: 0x86bb3f0
2006/03/31 15:58:44| aclMatchAclList: checking clients
2006/03/31 15:58:44| aclMatchAcl: checking 'acl clients src
192.168.1.0/255.255.255.0'
2006/03/31 15:58:44| aclMatchIp: '255.255.255.255' NOT found
2006/03/31 15:58:44| aclMatchAclList: no match, returning 0
2006/03/31 15:58:44| aclCheckFast: no matches, returning: 0
2006/03/31 15:58:44| aclCheckFast: list: 0x86bb468
2006/03/31 15:58:44| aclMatchAclList: checking all
2006/03/31 15:58:44| aclMatchAcl: checking 'acl all src
1.1.1.1/255.255.255.255'
2006/03/31 15:58:44| aclMatchIp: '255.255.255.255' NOT found
</log>
<squid.conf>
http_port 3128
debug_options ALL,1 33,2 28,6
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 8 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 4096 KB
minimum_object_size 0 KB
maximum_object_size_in_memory 16 KB
cache_dir ufs /var/spool/squid 100 16 256
log_mime_hdrs on
useragent_log /var/log/squid/useragent.log
referer_log /var/log/squid/referer.log
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 1.1.1.1/255.255.255.255
acl clients src 192.168.1.0/255.255.255.0
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # http
acl Safe_ports port 80 # http
acl CONNECT_method method CONNECT
acl allowed_protocols proto HTTP
acl xml_content req_mime_type -i ^text/xml$
acl xml_content req_mime_type -i ^application/xml$
acl xml_content req_mime_type -i ^application/rdf+xml$
acl html_content req_mime_type -i ^text/html$
acl html_content req_mime_type -i ^text/xhtml$
acl HEAD_method method HEAD
acl GET_method method HEAD
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT_method !SSL_ports
http_access allow GET_method xml_content clients
http_access allow HEAD_method html_content clients
http_access deny to_localhost
http_access allow clients
http_access allow localhost
http_access deny !clients
http_reply_access allow clients
http_reply_access deny !clients
icp_access deny all
miss_access allow clients
miss_access deny all
reply_header_max_size 8 KB
request_body_max_size 4 KB
reply_body_max_size 8 allow clients
reply_body_max_size 0 deny all
strip_query_terms off
coredump_dir /var/spool/squid
</squid.conf>
-- Dmitry Makovey Web Systems Administrator Athabasca University (780) 675-6245
This archive was generated by hypermail pre-2.1.9 : Sat Apr 01 2006 - 12:00:05 MST