So, ich bin jetzt mal ein Stück weiter. Egal, welcher Benutzer surft, bei "127.0.0.1" wird auch ein kleiner Teil mit angerechnet. Auch stehen im access.log (mit squidview gelesen) einige Zeilen wie
0.0.1 <URL>
"0.0.1"? Aha, toll ☹ Ich versteh das nicht. Auch wenn ein squid-Benutzer auf den Webserver am selben System zugreift, dürfte doch da nicht 127.0.0.1 als Aufrufer stehen, oder? 😕
Ich poste hier mal meine squid.conf, vieleicht hilfts ja weiter:
auth_param basic program /usr/lib/squid/pam_auth
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hour
auth_param basic casesensitive off
authenticate_ip_ttl 6 hour
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 873 # rsync
acl SSL_ports port 110 # pop3
acl SSL_ports port 10000 # Webmin
acl Safe_ports port 80 # http
acl Safe_ports port 20 # ftp
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl Safe_ports port 49152-65534 # passiv ftp
acl Safe_ports port 25 # smtp
acl purge method PURGE
acl CONNECT method CONNECT
acl zeit time MTWHF 07:30-17:00
acl checkpw proxy_auth REQUIRED
acl SQUISHLOC dst myproxy
acl SQUISHED1 proxy_auth -i "/etc/squid/squished"
acl SQUISHED2 ident "/etc/squid/squished"
deny_info http://example.tld/squish/?squished& SQUISHED1
deny_info http://example.tld/squish/?squished& SQUISHED2
http_access allow SQUISHLOC
http_access allow checkpw !SQUISHED1
http_access deny SQUISHED1
http_access deny SQUISHED2
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow checkpw all
http_access deny !zeit all
http_access deny localhost
http_access deny all
icp_access allow all
follow_x_forwarded_for deny all
acl_uses_indirect_client on
delay_pool_uses_indirect_client on
log_uses_indirect_client on
http_port 127.0.0.1:3128
hierarchy_stoplist cgi-bin ?
cache_mem 32 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap LFUDA
cache_replacement_policy heap LFUDA
cache_dir ufs /var/spool/squid 100 16 256
minimum_object_size 0 KB
maximum_object_size 4096 KB
cache_swap_low 90
cache_swap_high 95
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
ftp_user Squid@
ftp_list_width 32
ftp_passive on
ftp_sanitycheck on
ftp_telnet_protocol on
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
header_access X-Forwarded-For deny all
cache_mgr nefarius@darkhosters.net
mail_program mail
httpd_suppress_version_string off
visible_hostname myproxy
icp_port 3130
error_directory /usr/share/squid/errors/German
hosts_file /etc/hosts
coredump_dir /var/spool/squid
Hoffe, das bringt was. LG nefarius
