[jerfeson santos]

Pela Web não está indo. Coloquei http://ip e nada

[jerfeson santos]

Ok! Matheus qualquer coisa estamos ai. Abraços boa sorte.

[jerfeson santos]

Caro Matheus,

Essa configuração pode ser feita pelo modo gráfico ou via ssh. Vai em Proxy/HTTP em configuration/ Bypass the transparent Proxy from Source. Lá defini os IPS que necessita ter acesso livre. Espero ter ajudado abraços. Posta depois o resultado.

[jerfeson santos]

do dansguardian:

# DansGuardian config file for version 2.9.x

reportinglevel = 3

languagedir = ‘/usr/share/dansguardian/languages’

language = ‘en’

loglevel = 1

logexceptionhits = on

logfileformat = 1 # maybe we should change this?

#maxlogitemlength = 400

#anonymizelogs = on

#syslog = on

#statlocation = ‘/var/log/dansguardian/stats’

loglocation = ‘/var/log/fifo/dansguardian’

filterip = 127.0.0.1

filterport = 9999

proxyip = 127.0.0.1

proxyport = 9998

accessdeniedaddress = ‘http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl’

nonstandarddelimiter = on

usecustombannedimage = 1

custombannedimagefile = ‘/usr/share/dansguardian/transparent1x1.gif’

# Filter groups options

filtergroups = 1

filtergroupslist = ‘/etc/dansguardian/filtergroupslist’

# Authentication files location

bannediplist = ‘/etc/dansguardian/lists/bannediplist’

exceptioniplist = ‘/etc/dansguardian/lists/exceptioniplist’

banneduserlist = ‘/etc/dansguardian/dansguardian/lists/banneduserlist’

exceptionuserlist = ‘/etc/dansguardian/lists/exceptionuserlist’

showweightedfound = on

weightedphrasemode = 2

urlcachenumber = 1000 # maybe we should set this higher?

urlcacheage = 900

scancleancache = on

phrasefiltermode = 2

preservecase = 0

hexdecodecontent = off

forcequicksearch = off

reverseaddresslookups = off

reverseclientiplookups = off

logclienthostnames = off # maybe this should be an option?

createlistcachefiles = on

maxuploadsize = -1

maxcontentfiltersize = 256

maxcontentramcachescansize = 2000

maxcontentfilecachescansize = 20000

filecachedir = ‘/tmp’

deletedownloadedtempfiles = on

# download manager stuff

initialtrickledelay = 20

trickledelay = 10

downloadmanager = ‘/etc/dansguardian/downloadmanagers/default.conf’

# antivirus

#contentscanner = ‘/etc/dansguardian/contentscanners/clamav.conf’

contentscannertimeout = 60

contentscanexceptions = off

# auth plugins

#authplugin = ‘/etc/dansguardian/authplugins/proxy-basic.conf’

#authplugin = ‘/etc/dansguardian/authplugins/proxy-digest.conf’

#authplugin = ‘/etc/dansguardian/authplugins/proxy-ntlm.conf’

#authplugin = ‘/etc/dansguardian/authplugins/ident.conf’

authplugin = ‘/etc/dansguardian/authplugins/ip.conf’

recheckreplacedurls = off

forwardedfor = on

usexforwardedfor = on

logconnectionhandlingerrors = on

logchildprocesshandling = off

maxchildren = 60

minchildren = 8

minsparechildren = 4

preforkchildren = 6

maxsparechildren = 32

maxagechildren = 500

# maximum number of concurrent ips

maxips = 0

ipcfilename = ‘/tmp/.dguardianipc’

urlipcfilename = ‘/tmp/.dguardianurlipc’

pidfilename = ‘/var/run/dansguardian.pid’

nodaemon = off

nologger = off

# Enable logging of “ADs” category blocks

logadblocks = off

loguseragent = off

# daemonuser = ‘nobody’

# daemongroup = ‘nobody’

softrestart = off

mailer = ‘/usr/sbin/sendmail -t’

[jerfeson santos]

Segue a configuração de meu squid:

shutdown_lifetime 1 seconds

icp_port 0

http_port 0.0.0.0:8080 transparent

cache_effective_user squid

cache_effective_group squid

pid_filename /var/run/squid.pid

cache_mem 100 MB

cache_dir aufs /var/spool/squid 5000 16 256

error_directory /usr/share/squid/errors/Portuguese

max_filedesc 12513

server_persistent_connections off

half_closed_clients off

buffered_logs on

# START LOG

cache_log /var/log/squid/cache.log

cache_access_log syslog:local6.info

cache_store_log none

useragent_log /var/log/squid/useragent.log

strip_query_terms off

log_mime_hdrs off

# END LOG

# FORWARD IP ADDRESS

forwarded_for on

# START PROFILE ACLS

acl default_safe_ports port “/var/efw/proxy/profiles/defaultprofile/acls/safeports.acl”

acl default_ssl_ports port “/var/efw/proxy/profiles/defaultprofile/acls/safesslports.acl”

acl default_blocked_mimetypes rep_mime_type “/var/efw/proxy/profiles/defaultprofile/mimetypes”

acl default_0_timeframe time MTWHFAS 00:00-24:00

# END PROFILE ACLS

acl all src 0.0.0.0/0.0.0.0

acl localhost src 127.0.0.1/255.255.255.255

acl CONNECT method CONNECT

acl EFW_http port 80

acl EFW_https port 10443

acl EFW_ips dst 192.168.10.253

acl EFW_networks src “/var/efw/proxy/acls/src_subnets.acl”

acl EFW_dst_networks dst “/var/efw/proxy/acls/src_subnets.acl”

acl HAVP_ALLOWED_PROTOS proto HTTP

acl HAVP_ALLOWED_PROTOS proto SSL

acl QUERY urlpath_regex cgi-bin ?

cache deny QUERY

cache deny localhost

cache deny CONNECT

cache allow all

# GREEN

acl EFW_src_green src 192.168.10.0/255.255.255.0

acl EFW_dst_green dst 192.168.10.0/255.255.255.0

# Only allow cachemgr access from localhost

acl manager proto cache_object

http_access allow manager EFW_ips

http_access deny manager

#Only allow snmp access from localhost

acl snmppublic snmp_community public

snmp_access allow EFW_ips

snmp_access allow localhost

snmp_access deny all

header_access Via deny all

# EFW PROXY INTERFACE

# ACCESS TO SQUID

# local machine, no restriction

http_access allow localhost

# GUI admin if local machine connects

http_access allow EFW_ips EFW_networks EFW_http

http_access allow CONNECT EFW_ips EFW_networks EFW_https

# Deny not web services

http_access deny !default_safe_ports !default_ssl_ports

http_access deny CONNECT !default_ssl_ports

http_access allow EFW_networks default_0_timeframe

http_access deny all

http_reply_access allow localhost

http_reply_access allow EFW_networks !default_blocked_mimetypes

http_reply_access deny all

maximum_object_size 1024 KB

minimum_object_size 0 KB

request_body_max_size 0 KB

reply_body_max_size 0 allow all

cache_mgr Informatica@ceapeba.org.br

visible_hostname fwceapeba

# begin custom.tmpl

# end custom.tmpl

# cache peers for dansguardian

cache_peer 127.0.0.1 parent 9999 0 no-query no-digest no-netdb-exchange name=dg_profile1 login=*:password

cache_peer_access dg_profile1 deny localhost

cache_peer_access dg_profile1 deny !HAVP_ALLOWED_PROTOS

cache_peer_access dg_profile1 allow EFW_networks default_0_timeframe

cache_peer_access dg_profile1 deny EFW_networks

never_direct deny localhost

never_direct deny !HAVP_ALLOWED_PROTOS all default_0_timeframe

never_direct allow all default_0_timeframe

never_direct allow all

[jerfeson santos]

quando ativo o proxy http dar isso nas estações ao acessar a internet:

ERRO

A URL solicitada no pode ser recuperada

---

Na tentativa de recuperar a URL: http://webmail.ceapeba.org.br/

O seguinte erro foi encontrado:

Cache incapaz de encaminhar esta requisio neste momento.

Esta requisio no pode ser encaminhada para o servidor ou para qualquer outro cache. A causa mais provvel para este erro :

O administrador do cache no permite que este cache faa conexes diretas para servidores, e

Todos os caches configurados no esto disponveis.

---

Generated Thu, 22 Apr 2010 12:52:41 GMT by fwceapeba (squid/2.6.STABLE18)

[jerfeson santos]

Pode ser cache cheia pra está dando esse problema e não permitindo startar o dansguardian????

[jerfeson santos]

Estou observando pelo WinSCP e tem outras pasta além do dansguardian. Tem um arquivo boot.log em txt que tem:

Apr 19 23:57:02 fwceapeba syslog-ng: syslog-ng -HUP succeeded

Apr 19 23:57:02 fwceapeba syslog-ng: syslog-ng -HUP succeeded

Apr 19 23:57:02 fwceapeba syslog-ng: syslog-ng -HUP succeeded

Apr 20 08:06:07 fwceapeba havp: havp shutdown failed

Apr 20 08:06:07 fwceapeba havp: havp shutdown failed

Apr 20 10:36:01 fwceapeba havp: havp startup failed

Apr 20 10:36:10 fwceapeba dansguardian: dansguardian startup failed

Apr 20 10:37:36 fwceapeba pyzord: pyzord shutdown failed

Apr 20 10:37:53 fwceapeba dnsmasq: dnsmasq shutdown succeeded

Apr 20 10:37:53 fwceapeba dnsmasq: dnsmasq startup succeeded

Apr 20 11:22:10 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 11:22:18 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:22:42 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 11:22:51 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:23:08 fwceapeba havp: havp startup failed

Apr 20 11:23:16 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:23:26 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 11:23:34 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:25:28 fwceapeba havp: havp startup failed

Apr 20 11:25:29 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:25:29 fwceapeba dansguardian: dansguardian shutdown succeeded

Apr 20 11:25:37 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:25:39 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 11:25:48 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:26:56 fwceapeba havp: havp startup failed

Apr 20 11:27:05 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:36:10 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 11:36:18 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:48:47 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 11:48:55 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:50:52 fwceapeba syslog-ng: syslog-ng startup succeeded

Apr 20 11:50:53 fwceapeba ulogd: ulogd startup succeeded

Apr 20 11:51:00 fwceapeba capi: capiinit startup failed

Apr 20 11:51:12 fwceapeba dnsmasq: dnsmasq startup succeeded

Apr 20 11:51:13 fwceapeba httpd: httpd startup succeeded

Apr 20 11:51:13 fwceapeba sshd: succeeded

Apr 20 11:51:17 fwceapeba pyzord: pyzord shutdown failed

Apr 20 11:51:17 fwceapeba ntpd: ntpd startup succeeded

Apr 20 11:51:17 fwceapeba dnsmasq: dnsmasq -HUP succeeded

Apr 20 11:51:18 fwceapeba pyzord: pyzord shutdown failed

Apr 20 11:51:19 fwceapeba p3scan: p3scan startup succeeded

Apr 20 11:51:21 fwceapeba postfix: succeeded

Apr 20 11:51:21 fwceapeba ntpd: ntpd shutdown succeeded

Apr 20 11:51:21 fwceapeba mailgraph: mailgraph startup succeeded

Apr 20 11:51:21 fwceapeba ntpd: ntpd startup succeeded

Apr 20 11:51:24 fwceapeba snort: snort startup failed

Apr 20 11:51:24 fwceapeba snort: snort startup failed

Apr 20 11:51:28 fwceapeba havp: havp startup failed

Apr 20 11:51:30 fwceapeba fcron: fcron startup succeeded

Apr 20 11:51:30 fwceapeba ntop: ntop startup succeeded

Apr 20 11:51:39 fwceapeba dansguardian: dansguardian startup failed

Apr 20 11:52:48 fwceapeba pyzord: pyzord shutdown failed

Apr 20 11:52:48 fwceapeba pyzord: pyzord startup succeeded

Apr 20 11:52:49 fwceapeba spamassassin: spamd startup succeeded

Apr 20 11:52:49 fwceapeba p3scan: p3scan shutdown succeeded

Apr 20 11:52:49 fwceapeba p3scan: p3scan startup succeeded

Apr 20 12:01:07 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 12:01:16 fwceapeba dansguardian: dansguardian startup failed

Apr 20 12:02:28 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 12:02:37 fwceapeba dansguardian: dansguardian startup failed

Apr 20 12:02:51 fwceapeba dansguardian: dansguardian startup failed

Apr 20 12:03:09 fwceapeba havp: havp shutdown failed

Apr 20 12:03:09 fwceapeba havp: havp shutdown failed

Apr 20 12:12:29 fwceapeba dansguardian: dansguardian startup failed

Apr 20 12:12:56 fwceapeba dansguardian: dansguardian startup failed

Apr 20 12:13:00 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 12:13:08 fwceapeba dansguardian: dansguardian startup failed

Apr 20 13:41:07 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 13:41:15 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:01:28 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 14:01:36 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:02:13 fwceapeba havp: havp startup failed

Apr 20 14:02:22 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:07:00 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 14:07:09 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:09:46 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 14:09:54 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:15:38 fwceapeba pyzord: pyzord shutdown succeeded

Apr 20 14:15:38 fwceapeba pyzord: pyzord startup succeeded

Apr 20 14:15:39 fwceapeba spamassassin: spamd shutdown succeeded

Apr 20 14:15:39 fwceapeba spamassassin: spamd startup succeeded

Apr 20 14:16:04 fwceapeba havp: havp startup failed

Apr 20 14:16:12 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:20:25 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 14:20:33 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:20:49 fwceapeba havp: havp startup failed

Apr 20 14:20:57 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:21:10 fwceapeba havp: havp startup failed

Apr 20 14:21:19 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:25:04 fwceapeba havp: havp startup failed

Apr 20 14:25:13 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:28:52 fwceapeba havp: havp startup failed

Apr 20 14:29:00 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:29:39 fwceapeba dansguardian: dansguardian shutdown failed

Apr 20 14:29:48 fwceapeba dansguardian: dansguardian startup failed

Apr 20 14:32:31 fwceapeba pyzord: pyzord shutdown succeeded

Apr 20 14:32:31 fwceapeba pyzord: pyzord startup succeeded

Apr 20 14:32:34 fwceapeba postfix: succeeded

Apr 20 14:32:34 fwceapeba mailgraph: mailgraph shutdown succeeded

Apr 20 14:32:35 fwceapeba postfix: succeeded

Apr 20 14:32:35 fwceapeba mailgraph: mailgraph startup succeeded

Os logs estão localizados nesta pasta loglocation = ‘/var/log/fifo/dansguardian’. Verifiquei isso no dansguardian.conf

[jerfeson santos]

Ao tentar acessar a internet em uma estação dar essa mensagem “Cache incapaz de encaminhar esta requisio neste momento” isso com proxy http ativo…

[jerfeson santos]

No primeiro comando retorna :

2010-04-20 14:24:55,818 – endian.logger – DEBUG – sync from old

/usr/lib/python2.4/site-packages/Cheetah/Compiler.py:1577: UserWarning: You supplied an empty string for the source!

Starting squid: . [OK]

Segundo comando:

boot.log:Apr 20 10:36:10 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:22:10 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 11:22:18 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:22:42 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 11:22:51 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:23:16 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:23:26 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 11:23:34 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:25:29 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:25:29 fwceapeba dansguardian: dansguardian shutdown succeeded

boot.log:Apr 20 11:25:37 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:25:39 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 11:25:48 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:27:05 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:36:10 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 11:36:18 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:48:47 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 11:48:55 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 11:51:39 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 12:01:07 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 12:01:16 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 12:02:28 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 12:02:37 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 12:02:51 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 12:12:29 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 12:12:56 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 12:13:00 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 12:13:08 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 13:41:07 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 13:41:15 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 14:01:28 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 14:01:36 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 14:02:22 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 14:07:00 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 14:07:09 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 14:09:46 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 14:09:54 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 14:16:12 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 14:20:25 fwceapeba dansguardian: dansguardian shutdown failed

boot.log:Apr 20 14:20:33 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 14:20:57 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 14:21:19 fwceapeba dansguardian: dansguardian startup failed

boot.log:Apr 20 14:25:13 fwceapeba dansguardian: dansguardian startup failed

[jerfeson santos]

O squid está ativo. E uso o filtro de conteúdo. Estava funcionando tudo normalmente até que o pessoal se queixou que a internet não estava funcionando ao verifica qual a mensagem o browser retorna era a seguinte: “Cache incapaz de encaminhar esta requisito neste momento” acessei pelo modo gráfico o serviço HTTP e parei voltou a funcionar só sem levar em considerações os filtros definidos. Abaixo serviços em ativa no firewall.

Antivírus PARADO

Antivírus FTP PARADO

Antivírus para HTTP (havp) PARADO

DHCP server PARADO

Email scanner (POP3) RODANDO

Filtro de conteúdo PARADO

NTP server RODANDO

OpenVPN server PARADO

Proxy Web RODANDO

Pyzor spam filter RODANDO

SIproxy PARADO

Secure Shell server RODANDO

Servidor CRON RODANDO

Servidor DNS proxy RODANDO

Servidor Web RODANDO

Servidor de histórico RODANDO

Sistema de Detecção de Intrusos PARADO

Spam filter for POP3 (spamd) RODANDO

Spam filter for SMTP (amavis) PARADO

VPN (IPsec)

[jerfeson santos]

Dimunuindo a quantidade de pontos necessários vou está tornando o serviço mas eficiente. E com relação a lista branca é preciso defini outros dominios para que possam fica excluidos da verificação de spam?? Na lista negra é o reverso??

[jerfeson santos]

Esse whitelist é a lista branca? Alimentei com os parametros que deu como exemplo “*@dominio.org.br” pra ficar válido pra todas as contas de email da empresa. Outra detalhe não compreendi o ponto B?

[Autor]

Posts