From: Epiphanov Sergei <serpiph@nikiet.ru>
To: combr@vesna.ru,
ALT Linux Sisyphus discussion list <sisyphus@altlinux.ru>
Subject: Re: [sisyphus] Ошибка SQUID
Date: Wed, 10 Nov 2004 14:25:14 +0300
Message-ID: <200411101425.14896.serpiph@nikiet.ru> (raw)
In-Reply-To: <200411101403.43608.combr@vesna.ru>
[-- Attachment #1: Type: text/plain, Size: 674 bytes --]
В сообщении от 10 Ноябрь 2004 13:03 Mike Lykov написал:
> В сообщении от Среда 10 Ноябрь 2004 13:28 Epiphanov Sergei написал:
> > Как только выбираюсь через squid на почту rambler.ru или yandex.ru, то
> > отваливается SQUID с сообщением в логах:
> > FATAL: Received Segment Violation...dying.
> > При этом сам процесс squid продолжает работать, но уже не отвечает на
> > попытки подключения.
>
> 1. какая версия squid?
> 2. какие хитрые настройки (аутентификация и т.п.) ?
> 3. что выше этого в логе cache.log?
> 4. что в access.log связанного с этими сайтами?
Вкладываю файл, иначе боюсь, что ответ не поместится в 40Кб.
--
С уважением, Епифанов Сергей
[-- Attachment #2: SQUID-answer.txt --]
[-- Type: text/plain, Size: 6513 bytes --]
нРБЕРШ:
--------------------------------------------------------------------------------------
1. SQUID 2.5.STABLE6 -alt3
--------------------------------------------------------------------------------------
2. еЯРЭ ldap-ЮСРЕМРХТХЙЮЖХЪ
auth_param basic program /usr/lib/squid/squid_ldap_auth ...
auth_param basic children 5
auth_param basic realm Server
auth_param basic credentialsttl 10 minutes
external_acl_type log_conn_type ttl=600 children=5 %LOGIN %SRC %DST /usr/lib/squid/log_connect.pl
acl log_conn external log_conn_type
оПНЦПЮЛЛЮ log_connect.pl:
#!/usr/bin/perl
my($user_conn,$pass_conn,$pg_server,$db_name);
#Use name to connect to SQL db
$user_conn='user';
#Password to connect to SQL db
$pass_conn='pass';
#PostgreSQL server
$pg_server = '192.168.1.1';
#Database name
$db_name = 'db';
use Pg;
$db_connect=Pg::connectdb ("host='${pg_server}' user='${user_conn}' password='${pass_conn}' dbname='${db_name}'");
if ($db_connect->status != PGRES_CONNECTION_OK) {
die;
}
$|=1;
while ($l=<STDIN>) {
chomp $l;
$_=$l;
($USER,$SRC,$DST)=split;
open LOGOUT,">>/var/log/squid/acl.log";
$loc_time=localtime;
$db_result=$db_connect->exec ("select cur_value,per_curmonth from user_quota where username='$USER'");
if ($db_result->resultStatus != PGRES_TUPLES_OK) {
print "ERR error=\"Not in quota list\"\n";
print LOGOUT "$loc_time ERROR -> $l\n";
close LOGOUT;
$db_result=undef;
next;
}
($Cur_quota,$Max_quota)=$db_result->fetchrow;
if ($Cur_quota >= $Max_quota) {
print "ERR error=\"Quota not allowed\"\n";
print LOGOUT "$loc_time QUOTA -> $l\n";
close LOGOUT;
$db_result=undef;
next;
} else {
close LOGOUT;
$db_result=undef;
print "OK\n";
next;
}
print "ERR error=not allowed\n"
}
------------------------------------------------------------------------------------------------------------
3. хД╦Р:
2004/11/09 12:09:03| NETDB state saved; 1 entries, 1 msec
2004/11/09 12:51:52| NETDB state saved; 1 entries, 241 msec
2004/11/09 14:04:39| NETDB state saved; 1 entries, 312 msec
2004/11/09 15:00:47| NETDB state saved; 1 entries, 751 msec
2004/11/09 16:04:13| NETDB state saved; 1 entries, 1 msec
2004/11/09 16:51:53| NETDB state saved; 1 entries, 712 msec
2004/11/09 18:07:34| NETDB state saved; 1 entries, 140 msec
2004/11/09 18:54:38| NETDB state saved; 1 entries, 0 msec
2004/11/09 19:42:57| NETDB state saved; 1 entries, 231 msec
2004/11/09 20:27:36| NETDB state saved; 1 entries, 100 msec
2004/11/09 21:13:58| NETDB state saved; 1 entries, 922 msec
2004/11/09 22:33:42| NETDB state saved; 1 entries, 1 msec
2004/11/09 23:40:57| NETDB state saved; 1 entries, 1 msec
2004/11/10 00:53:26| NETDB state saved; 1 entries, 1 msec
2004/11/10 01:59:09| NETDB state saved; 1 entries, 192 msec
2004/11/10 02:52:20| NETDB state saved; 1 entries, 481 msec
2004/11/10 04:01:51| NETDB state saved; 1 entries, 342 msec
2004/11/10 05:14:48| NETDB state saved; 1 entries, 91 msec
2004/11/10 06:23:40| NETDB state saved; 1 entries, 111 msec
2004/11/10 07:30:00| NETDB state saved; 1 entries, 1 msec
2004/11/10 08:24:22| NETDB state saved; 1 entries, 892 msec
2004/11/10 09:28:48| NETDB state saved; 1 entries, 922 msec
2004/11/10 10:25:24| NETDB state saved; 1 entries, 1 msec
FATAL: Received Segment Violation...dying.
--------------------------------------------------------------------------------------------------------------
4. б acl.log:
TCP_DENIED/407 1767 GET http://mail.yandex.ru/login - NONE/- text/html
TCP_REFRESH_MISS/200 12586 GET http://mail.yandex.ru/login user FIRST_UP_PARENT/192.168.2.1 text/html
TCP_REFRESH_HIT/200 1354 GET http://img.yandex.ru/css/_yandex-global-modern.css user FIRST_UP_PARENT/192.168.2.1 text/css
TCP_REFRESH_MISS/200 5138 GET http://img.yandex.ru/css/_yandex-global.css user FIRST_UP_PARENT/192.168.2.1 text/css
TCP_REFRESH_HIT/200 6080 GET http://img.yandex.ru/css/mail/_yandex-mail-modern.css user FIRST_UP_PARENT/192.168.2.1 text/cs
TCP_REFRESH_HIT/200 5031 GET http://img.yandex.ru/css/mail/_yandex-mail.css user FIRST_UP_PARENT/192.168.2.1 text/css
TCP_REFRESH_HIT/200 5031 GET http://img.yandex.ru/i/fp2.js user FIRST_UP_PARENT/192.168.2.1 application/x-javascript
TCP_MISS/302 1923 POST http://passport.yandex.ru/passport? user FIRST_UP_PARENT/192.168.2.1 text/plain
TCP_MISS/200 32555 GET http://www.westernunion.ru/info/agentLocatorLookup.asp? lit FIRST_UP_PARENT/192.168.2.1 text/html
TCP_IMS_HIT/304 270 GET http://www.westernunion.ru/style.css lit NONE/- text/css
TCP_IMS_HIT/304 286 GET http://www.westernunion.ru/ru/cache/errorMessages.js lit NONE/- application/x-javascript
TCP_IMS_HIT/304 286 GET http://www.westernunion.ru/scriptFiles/baseScripts.js lit NONE/- application/x-javascript
TCP_IMS_HIT/304 286 GET http://www.westernunion.ru/scriptFiles/custom.js lit NONE/- application/x-javascript
TCP_IMS_HIT/304 286 GET http://www.westernunion.ru/scriptFiles/scripts.js lit NONE/- application/x-javascript
TCP_IMS_HIT/304 286 GET http://www.westernunion.ru/scriptFiles/s_code_remote.js lit NONE/- application/x-javascript
TCP_MISS/302 931 GET http://passport.yandex.ru/passport? user FIRST_UP_PARENT/192.168.2.1 text/plain
TCP_MISS/302 579 GET http://mail.yandex.ru/yamail? user FIRST_UP_PARENT/192.168.2.1 text/plain
TCP_MISS/200 6951 GET http://mail.yandex.ru/text/busy.html user FIRST_UP_PARENT/192.168.2.1 text/html
TCP_REFRESH_HIT/200 3703 GET http://img.yandex.ru/css/mail/main_advanced.css user FIRST_UP_PARENT/192.168.2.1 text/css
TCP_REFRESH_HIT/200 5752 GET http://img.yandex.ru/css/mail/main.css user FIRST_UP_PARENT/192.168.2.1 text/css
TCP_REFRESH_HIT/200 2818 GET http://img.yandex.ru/css/mail/quirks.css user FIRST_UP_PARENT/192.168.2.1 text/css
TCP_MISS/200 39102 GET http://mail.yandex.ru/yamail user FIRST_UP_PARENT/192.168.2.1 text/html
TCP_REFRESH_MISS/200 11546 GET http://img.yandex.ru/css/mail/mail.js user FIRST_UP_PARENT/192.168.2.1 application/x-javascr
TCP_DENIED/403 1493 POST http://activex.microsoft.com/objects/ocget.dll - NONE/- text/html
TCP_DENIED/403 1487 POST http://codecs.microsoft.com/isapi/ocget.dll - NONE/- text/html
TCP_MISS/000 329 CONNECT login.icq.com:443 user FIRST_UP_PARENT/192.168.2.1 -
------------------------------------------------------------------------------------------------------------------------------
[-- Attachment #3: squid.diff.bz2 --]
[-- Type: application/x-bzip2, Size: 4206 bytes --]
next prev parent reply other threads:[~2004-11-10 11:25 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-11-10 9:28 Epiphanov Sergei
2004-11-10 10:03 ` Mike Lykov
2004-11-10 11:25 ` Epiphanov Sergei [this message]
2004-11-10 11:34 ` Mike Lykov
2004-11-10 11:46 ` Epiphanov Sergei
2004-11-10 14:18 ` Denis Ovsienko
2004-11-18 7:58 ` Epiphanov Sergei
2004-11-18 12:17 ` Epiphanov Sergei
2004-11-18 19:49 ` Denis Ovsienko
2004-11-19 8:45 ` Epiphanov Sergei
2004-11-10 11:30 ` Epiphanov Sergei
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200411101425.14896.serpiph@nikiet.ru \
--to=serpiph@nikiet.ru \
--cc=combr@vesna.ru \
--cc=sisyphus@altlinux.ru \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Sisyphus discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus/0 sisyphus/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus sisyphus/ http://lore.altlinux.org/sisyphus \
sisyphus@altlinux.ru sisyphus@altlinux.org sisyphus@lists.altlinux.org sisyphus@lists.altlinux.ru sisyphus@lists.altlinux.com sisyphus@linuxteam.iplabs.ru sisyphus@list.linux-os.ru
public-inbox-index sisyphus
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git