Problemas con Squid

Lun Mayo 26 18:45:32 CLT 2008

Estimado Amigos, ya eh agotado casi todas mis oportunidades para
resolver este problema y eh realizado los consejos de quienes me
respondieron "muchas gracias a todos!" pero no resulta :,( acudo de
nuevo si hay nuevas sugerencias por favor, "dejo toda la carne a la
parrilla"
#cat squid.conf
shutdown_lifetime 5 seconds
icp_port 0
http_port 192.168.168.1:800 transparent
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
cache_effective_user squid
cache_effective_group squid
umask 022
pid_filename /var/run/squid.pid
cache_mem 2 MB
cache_dir aufs /var/log/cache 50 16 256
error_directory /usr/lib/squid/advproxy/errors.ipcop/Spanish
access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
useragent_log /var/log/squid/user_agent.log
strip_query_terms off
log_mime_hdrs off
forwarded_for off
via off
acl within_timeframe time MTWHFAS 00:00-24:00
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 # https
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 563 # snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 800 # Squids port (for icons)

acl IPCop_http  port 81
acl IPCop_https port 445
acl IPCop_ips              dst 192.168.168.1
acl IPCop_networks         src "/var/ipcop/proxy/advanced/acls/src_subnets.acl"
acl IPCop_servers          dst "/var/ipcop/proxy/advanced/acls/src_subnets.acl"
acl IPCop_green_network    src 192.168.168.0/255.255.255.0
acl IPCop_green_servers    dst 192.168.168.0/255.255.255.0
acl CONNECT method CONNECT

#Start of custom includes
acl raven dst 200.6.53.13/255.255.255.255
no_cache deny raven
client_persistent_connections on
server_persistent_connections on
persistent_connection_after_error on

#End of custom includes

#Access to squid:
#local machine, no restriction
http_access allow         localhost
#GUI admin if local machine connects
http_access allow         IPCop_ips IPCop_networks IPCop_http
http_access allow CONNECT IPCop_ips IPCop_networks IPCop_https
#Deny not web services
http_access deny          !Safe_ports
http_access deny  CONNECT !SSL_ports

#Set custom configured ACLs
http_access allow IPCop_networks within_timeframe
http_access deny  all
#Strip HTTP Header
header_access X-Forwarded-For deny all
header_access Via deny all
httpd_suppress_version_string on
maximum_object_size 4096 KB
minimum_object_size 0 KB
request_body_max_size 0 KB
reply_body_max_size 0 allow all
visible_hostname ipcop.localdomain
url_rewrite_program /usr/sbin/squidGuard
url_rewrite_children 5

LOG SQUID.LOG
# tail -f /var/log/squid/access.log | grep 192.168.168.20
Ahora ejecuto el programa de Rayen que funciona en WinXP, y reviso el
log que me deja squid.
1211824761.059     98 192.168.168.20 TCP_MISS/200 915 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Autentificacion.asmx
- DIRECT/200.6.53.13 text/xml
1211824761.118     59 192.168.168.20 TCP_MISS/200 672 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Farmacia.asmx
- DIRECT/200.6.53.13 text/xml
1211824761.225    106 192.168.168.20 TCP_MISS/200 915 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Autentificacion.asmx
- DIRECT/200.6.53.13 text/xml
1211824806.279  45054 192.168.168.20 TCP_MISS/200 672 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Farmacia.asmx
- DIRECT/200.6.53.13 text/xml
1211824956.644    388 192.168.168.20 TCP_MISS/200 899 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Servidor.asmx
- DIRECT/200.6.53.13 text/xml
1211824956.876    232 192.168.168.20 TCP_MISS/200 10636 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Servidor.asmx
- DIRECT/200.6.53.13 text/xml
1211824958.386   1021 192.168.168.20 TCP_MISS/200 581 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/FichaClinica.asmx
- DIRECT/200.6.53.13 text/xml
1211824958.715    328 192.168.168.20 TCP_MISS/200 581 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Farmacia.asmx
- DIRECT/200.6.53.13 text/xml
1211824959.118    404 192.168.168.20 TCP_MISS/200 581 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Inscripcion.asmx
- DIRECT/200.6.53.13 text/xml
1211824959.675    290 192.168.168.20 TCP_MISS/200 581 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/General.asmx
- DIRECT/200.6.53.13 text/xml
1211825016.256    452 192.168.168.20 TCP_MISS/200 18136 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Autentificacion.asmx
- DIRECT/200.6.53.13 text/xml
1211825016.702    439 192.168.168.20 TCP_MISS/200 672 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Farmacia.asmx
- DIRECT/200.6.53.13 text/xml
1211825016.807    104 192.168.168.20 TCP_MISS/200 915 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Autentificacion.asmx
- DIRECT/200.6.53.13 text/xml
1211825016.890     82 192.168.168.20 TCP_MISS/200 672 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Farmacia.asmx
- DIRECT/200.6.53.13 text/xml
1211825016.987     96 192.168.168.20 TCP_MISS/200 915 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Autentificacion.asmx
- DIRECT/200.6.53.13 text/xml
1211825017.048     62 192.168.168.20 TCP_MISS/200 672 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Farmacia.asmx
- DIRECT/200.6.53.13 text/xml
1211825017.142     93 192.168.168.20 TCP_MISS/200 915 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Autentificacion.asmx
- DIRECT/200.6.53.13 text/xml
1211825017.200     57 192.168.168.20 TCP_MISS/200 672 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Farmacia.asmx
- DIRECT/200.6.53.13 text/xml
1211825017.332    132 192.168.168.20 TCP_MISS/200 915 POST
http://webservices.rayensalud.cl/Saydex.ServidorSiap.WebService/Autentificacion.asmx
- DIRECT/200.6.53.13 text/xml
1211825351.475   1407 192.168.168.20 TCP_MISS/200 1247 GET
http://89.202.157.138/nod_eval/update.ver - DIRECT/89.202.157.138
application/octet-stream

Aqui el programa se sale y no ingresa, el la maquina local en donde
ejecute el programa Rayendice.
netstat ano
TCP    pcwinxp:4050       200.6.53.13:http       ESTABLISHED ( momento
de ingresar el user y la password)
TCP    pcwinxp:4050       200.6.53.13:http       TIME_WAIT ( me bota
el programa)

Estoy con ipcop, la configuraciond del squid.conf es algo similar uno
que tengo de pruebas con debian+squid (tengo el mismo problema).
Solo me restaria hacer una regla de iptables haciendo NAT a la ip
publica del servidor 200.6.53.13 asi como saltarse del SQUID , pero no
se como hacerlo o no se si se puede.
eh ocupado muchas reglas encontradas en la web ...

Muchas Gracias.
PD: Recuerden que coloco cualquir ROUTER (dlink, airlive, linksys,
etc) en lugar del squid y funciona a la primera.