[squid-users] Squid proxy not working when upgrade from 27 to 3.5

Tue Oct 23 08:52:08 UTC 2018

The result of squid -k parse

oul163:/etc/squid # squid -k parse
2018/10/23 16:51:05| Startup: Initializing Authentication Schemes ...
2018/10/23 16:51:05| Startup: Initialized Authentication Scheme 'basic'
2018/10/23 16:51:05| Startup: Initialized Authentication Scheme 'digest'
2018/10/23 16:51:05| Startup: Initialized Authentication Scheme 'negotiate'
2018/10/23 16:51:05| Startup: Initialized Authentication Scheme 'ntlm'
2018/10/23 16:51:05| Startup: Initialized Authentication.
2018/10/23 16:51:05| Processing Configuration File: /etc/squid/squid.conf
(depth 0)
2018/10/23 16:51:05| Processing: acl localnet src 10.0.0.0/8
2018/10/23 16:51:05| Processing: acl localnet src 172.16.0.0/12
2018/10/23 16:51:05| Processing: acl localnet src 192.168.0.0/16
2018/10/23 16:51:05| Processing: acl localnet src fc00::/7
2018/10/23 16:51:05| Processing: acl localnet src fe80::/10
2018/10/23 16:51:05| Processing: acl localnet src 192.168.31.0/24
2018/10/23 16:51:05| WARNING: (A) '192.168.31.0/24' is a subnetwork of (B)
'192.168.0.0/16'
2018/10/23 16:51:05| WARNING: because of this '192.168.31.0/24' is ignored
to keep splay tree searching predictable
2018/10/23 16:51:05| WARNING: You should probably remove '192.168.31.0/24'
from the ACL named 'localnet'
2018/10/23 16:51:05| Processing: acl SSL_ports port 443 8000 8004 8005
2018/10/23 16:51:05| Processing: acl Safe_ports port 80
2018/10/23 16:51:05| Processing: acl Safe_ports port 21
2018/10/23 16:51:05| Processing: acl Safe_ports port 443
2018/10/23 16:51:05| Processing: acl Safe_ports port 70
2018/10/23 16:51:05| Processing: acl Safe_ports port 210
2018/10/23 16:51:05| Processing: acl Safe_ports port 1025-65535
2018/10/23 16:51:05| Processing: acl Safe_ports port 280
2018/10/23 16:51:05| Processing: acl Safe_ports port 488
2018/10/23 16:51:05| Processing: acl Safe_ports port 591
2018/10/23 16:51:05| Processing: acl Safe_ports port 777
2018/10/23 16:51:05| Processing: acl CONNECT method CONNECT
2018/10/23 16:51:05| Processing: access_log /var/log/squid/access.log
2018/10/23 16:51:05| Processing: http_access allow localnet
2018/10/23 16:51:05| Processing: http_access allow localhost
2018/10/23 16:51:05| Processing: http_port 3128
2018/10/23 16:51:05| Processing: coredump_dir /var/cache/squid
2018/10/23 16:51:05| Processing: refresh_pattern ^ftp: 1440 20 10080
2018/10/23 16:51:05| Processing: refresh_pattern ^gopher: 1440 0 1440
2018/10/23 16:51:05| Processing: refresh_pattern -i  (/cgi-bin/|\?) 0 0 0
2018/10/23 16:51:05| Processing: refresh_pattern . 0 20 4320
2018/10/23 16:51:05| Processing: cache_dir ufs /var/cache/squid 100 16 256
2018/10/23 16:51:05| Processing: cache_log /var/log/squid/cache.log
2018/10/23 16:51:05| Processing: cache_mem 8 MB
2018/10/23 16:51:05| Processing: cache_mgr webmaster
2018/10/23 16:51:05| Processing: cache_replacement_policy lru
2018/10/23 16:51:05| Processing: cache_store_log /var/log/squid/store.log
2018/10/23 16:51:05| Processing: cache_swap_high 95
2018/10/23 16:51:05| Processing: cache_swap_low 90
2018/10/23 16:51:05| Processing: client_lifetime 1 days
2018/10/23 16:51:05| Processing: connect_timeout 2 minutes
2018/10/23 16:51:05| Processing: error_directory /usr/share/squid/errors/en
2018/10/23 16:51:05| Processing: ftp_passive on
2018/10/23 16:51:05| Processing: maximum_object_size 4096 KB
2018/10/23 16:51:05| Processing: memory_replacement_policy lru
2018/10/23 16:51:05| Processing: minimum_object_size 0 KB
2018/10/23 16:51:05| Processing: visible_hostname oul299.ouhk.edu.hk
2018/10/23 16:51:05| Processing: http_port 3128 accel vhost
defaultsite=oul163.ouhk.edu.hk
2018/10/23 16:51:05| Processing: https_port 80 accel
cert=/etc/squid/certs/ouhk.crt key=/etc/squid/certs/ouhk.key
defaultsite=oul163.ouhk.edu.hk vhost protocol=https
options=NO_SSLv3:NO_SSLv2
2018/10/23 16:51:05| Processing: https_port 8000 accel
cert=/etc/squid/certs/ouhk.crt key=/etc/squid/certs/ouhk.key
defaultsite=oul163.ouhk.edu.hk vhost protocol=https
options=NO_SSLv3:NO_SSLv2
2018/10/23 16:51:05| Processing: https_port 8004 accel
cert=/etc/squid/certs/ouhk2.crt key=/etc/squid/certs/ouhk2.key
defaultsite=oul163.ouhk.edu.hk vhost protocol=https
options=NO_SSLv3:NO_SSLv2
2018/10/23 16:51:05| Processing: https_port 8005 accel
cert=/etc/squid/certs/ouhk3.crt key=/etc/squid/certs/ouhk3.key
defaultsite=oul163.ouhk.edu.hk vhost protocol=https
options=NO_SSLv3:NO_SSLv2
2018/10/23 16:51:05| Processing: sslproxy_options NO_SSLv3:NO_SSLv2
2018/10/23 16:51:05| Processing: access_log /var/log/squid/access.log squid
2018/10/23 16:51:05| Processing: cache_effective_user squid
2018/10/23 16:51:05| Processing: cache_log /var/log/squid/cache.log
2018/10/23 16:51:05| Processing: cache_store_log /var/log/squid/store.log
2018/10/23 16:51:05| Processing: cache_peer 192.168.31.113 parent 8001 0
proxy-only name=prdhrms
2018/10/23 16:51:05| Processing: cache_peer_domain prdhrms
prdhrms.ouhk.edu.hk
2018/10/23 16:51:05| Processing: cache_peer 192.168.31.134 parent 8005 0 ssl
sslflags=DONT_VERIFY_PEER proxy-only name=uathrms
ssloptions=NO_SSLv3:NO_SSLv2
2018/10/23 16:51:05| Processing: cache_peer_domain uathrms
uathrms.ouhk.edu.hk
2018/10/23 16:51:05| Processing: cache_peer 192.168.31.134 parent 8004 0 ssl
sslflags=DONT_VERIFY_PEER proxy-only name=sithrms
ssloptions=NO_SSLv3:NO_SSLv2
2018/10/23 16:51:05| Processing: cache_peer_domain sithrms
sithrms.ouhk.edu.hk
2018/10/23 16:51:05| Processing: cache_peer 192.168.31.134 parent 8000 0 ssl
sslflags=DONT_VERIFY_PEER proxy-only name=devhrms
ssloptions=NO_SSLv3:NO_SSLv2
2018/10/23 16:51:05| Processing: cache_peer_domain devhrms
devhrms.ouhk.edu.hk
2018/10/23 16:51:05| Processing: acl localip src 192.168.31.0/24
2018/10/23 16:51:05| Processing: acl hrmsacl dstdomain .ouhk.edu.hk
2018/10/23 16:51:05| Processing: http_access allow hrmsacl
2018/10/23 16:51:05| Processing: cache_peer_access prdhrms allow hrmsacl
2018/10/23 16:51:05| Processing: cache_peer_access uathrms allow hrmsacl
2018/10/23 16:51:05| Processing: cache_peer_access sithrms allow hrmsacl
2018/10/23 16:51:05| Processing: cache_peer_access devhrms allow hrmsacl
2018/10/23 16:51:05| Processing: acl all src all
2018/10/23 16:51:05| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2018/10/23 16:51:05| WARNING: because of this '::/0' is ignored to keep
splay tree searching predictable
2018/10/23 16:51:05| WARNING: You should probably remove '::/0' from the ACL
named 'all'
2018/10/23 16:51:05| Processing: acl manager proto cache_object
2018/10/23 16:51:05| UPGRADE: ACL 'manager' is now a built-in ACL. Remove it
from your config file.
2018/10/23 16:51:05| Processing: acl localhost src 127.0.0.1/32
2018/10/23 16:51:05| WARNING: (B) '127.0.0.1' is a subnetwork of (A)
'127.0.0.1'
2018/10/23 16:51:05| WARNING: because of this '127.0.0.1' is ignored to keep
splay tree searching predictable
2018/10/23 16:51:05| WARNING: You should probably remove '127.0.0.1' from
the ACL named 'localhost'
2018/10/23 16:51:05| WARNING: (B) '127.0.0.1' is a subnetwork of (A)
'127.0.0.1'
2018/10/23 16:51:05| WARNING: because of this '127.0.0.1' is ignored to keep
splay tree searching predictable
2018/10/23 16:51:05| WARNING: You should probably remove '127.0.0.1' from
the ACL named 'localhost'
2018/10/23 16:51:05| Processing: acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
2018/10/23 16:51:05| WARNING: (B) '127.0.0.0/8' is a subnetwork of (A)
'127.0.0.0/8'
2018/10/23 16:51:05| WARNING: because of this '127.0.0.0/8' is ignored to
keep splay tree searching predictable
2018/10/23 16:51:05| WARNING: You should probably remove '127.0.0.0/8' from
the ACL named 'to_localhost'
2018/10/23 16:51:05| WARNING: (B) '0.0.0.0' is a subnetwork of (A) '0.0.0.0'
2018/10/23 16:51:05| WARNING: because of this '0.0.0.0' is ignored to keep
splay tree searching predictable
2018/10/23 16:51:05| WARNING: You should probably remove '0.0.0.0' from the
ACL named 'to_localhost'
2018/10/23 16:51:05| WARNING: (B) '0.0.0.0' is a subnetwork of (A) '0.0.0.0'
2018/10/23 16:51:05| WARNING: because of this '0.0.0.0' is ignored to keep
splay tree searching predictable
2018/10/23 16:51:05| WARNING: You should probably remove '0.0.0.0' from the
ACL named 'to_localhost'
2018/10/23 16:51:05| Processing: acl purge method PURGE
2018/10/23 16:51:05| Processing: acl CONNECT method CONNECT
2018/10/23 16:51:05| Processing: http_access allow manager localhost
2018/10/23 16:51:05| Processing: http_access deny manager
2018/10/23 16:51:05| Processing: http_access allow purge localhost
2018/10/23 16:51:05| Processing: http_access deny purge
2018/10/23 16:51:05| Processing: http_access deny all
2018/10/23 16:51:05| Processing: logfile_rotate 10
2018/10/23 16:51:05| Initializing https proxy context
2018/10/23 16:51:05| Initializing cache_peer uathrms SSL context
2018/10/23 16:51:05| Initializing cache_peer sithrms SSL context
2018/10/23 16:51:05| Initializing cache_peer devhrms SSL context
2018/10/23 16:51:05| Initializing https_port [::]:80 SSL context
2018/10/23 16:51:05| Using certificate in /etc/squid/certs/ouhk.crt
2018/10/23 16:51:05| Initializing https_port [::]:8000 SSL context
2018/10/23 16:51:05| Using certificate in /etc/squid/certs/ouhk.crt
2018/10/23 16:51:05| Initializing https_port [::]:8004 SSL context
2018/10/23 16:51:05| Using certificate in /etc/squid/certs/ouhk2.crt
2018/10/23 16:51:05| Initializing https_port [::]:8005 SSL context
2018/10/23 16:51:05| Using certificate in /etc/squid/certs/ouhk3.crt


--
Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html