welcome friends , I hope that is useful for you here ~~~

RHEL5+SAMBA+WINBIND+SARG+MRTG+HAVP+CLAMAV+SQUID 企业完整代理解决方案

上一篇 / 下一篇  2008-04-15 11:01:15 / 个人分类：linux study

查看( 466 ) / 评论( 1 ) / 评分( 0 / 0 )
RHEL5+SAMBA+WINBIND+SARG+MRTG+HAVP+CLAMAV+SQUID 企业完整代理解决方案LUPA开源社区1AR+~ \],k
author : Joson Chen
?8@l!E8g g0email&msn : quanyan.chen@hotmail.com
CD6A5L1Kr|Z^0blog : http://joson.lupaworld.com
P%Muh$h'R F0LUPA开源社区;K7V7k9q$Dx1T
一、先upgrade最新samba及其依懒包
#}^4y:u0[S0我已把相关的rpm包打包并上传了，可到http://www.live-share.com/files/318191/samba3.0.28a-35.i386-all.tar.gz.html 下载相关RPM包（里面包括了samba依懒包了）LUPA开源社区G:`C#Gl2^U D6_$OL
rpm -Uvh samba3-3.0.28a-35.i386.rpm samba3-client-3.0.28a-35.i386.rpm libsmbclient-3.0.28a-35.i386.rpm
*Szk f]2Q0再upgrade samba-winbind 包
)P-w-] Q!d3rI0rpm -Uvh samba3-winbind-3.0.28a-35.i386.rpmLUPA开源社区(\3Il5H\Jh:`(i0Xk

]I/d1W&T9e0二、再编辑krb5
7k yLDZ0vim /etc/krb5.conf
!n.Q~2sL^&h-w0
xoM;[9r3\0[logging]LUPA开源社区$RVF7yH_fie
 default = FILE:/var/log/krb5libs.log
#|T*Ux't0zrBQS0 kdc = FILE:/var/log/krb5kdc.log
n*S;J8R`Y d$bT%Lf0 admin_server = FILE:/var/log/kadmind.log
1J-s1u Q EP%T}Q"C0LUPA开源社区 h0d9h)p7l5Q
[libdefaults]
P)~t-Hz&^0 default_realm = EXAMPLE.COMLUPA开源社区$k Mx4X+P e7rdh
 dns_lookup_realm = falseLUPA开源社区,BX? KhL
 dns_lookup_kdc = falseLUPA开源社区h$h4o{9aPP
 ticket_lifetime = 24hLUPA开源社区L,W]ad9^,WL
 forwardable = yes
'Xd!lyzA-_0LUPA开源社区oo!q$Y1m$Q&t%X.b\
[realms]LUPA开源社区v_H;}0y c"xs
 EXAMPLE.COM = {LUPA开源社区o*m0v*_+^
  kdc = pdcserver.example.com:88
r%y~ qrI:y \ n0  admin_server = pdcserver.example.comLUPA开源社区:q:F]4J1d]z;A { u
  default_domain = example.comLUPA开源社区F+LCl%kl
 }
CEV+B8WL ]x0LUPA开源社区3nY6bl {,N2X#o7Xp
[domain_realm]LUPA开源社区hw5]"T$E"tjh#f
 .example.com = EXAMPLE.COMLUPA开源社区b:n3i~ mG(_#KsB
 example.com = EXAMPLE.COM
)}2[a_Yb&o0LUPA开源社区t;NDs:m${
[appdefaults]
lj:fNQ {$m|0 pam = {
)YX4RQW&V0   debug = falseLUPA开源社区"M+K&B Ue3n-o&n*C5i
   ticket_lifetime = 36000LUPA开源社区/Z6pm1F~ d
   renew_lifetime = 36000LUPA开源社区d_.EM+}
   forwardable = trueLUPA开源社区!z SjZ&SU4P5W
   krb4_convert = false
7q F9Pu SN0 }
g7dD^_0n0Iw0LUPA开源社区k{ sq3XtB/k-SM S
然后调整系统时间，使系统时间与域控时间不能相统一，时间相差不能超过半小时
vwzBe`0
,S u0cc P&b@+k K!}E0调整完时间利用Kinit工具测试krb5的设置是否正确LUPA开源社区*o(Q3W!k)h Xq3xhfH
kinit administrator@EXAMPLE.COMLUPA开源社区K$Rh+Xd \!tp1E/iD
password :LUPA开源社区 E dxb:`%qY_
输入password 后返回success 字符或直接返回命令行表示成功通信，其它的信息表明不能正常通信。LUPA开源社区 bJ%l,fp Q
LUPA开源社区0sm3CL9c(a A
klist 可以查看有效凭证时间LUPA开源社区*u*XtFnrh

XP1@!{5j*Q Z0s)\0三、然后编辑samba与域用户相结合
e i8E\h7D!J1h0vim /etc/samba/smb.conf
.u_?HAU0LUPA开源社区Z2dL5T)i {0kvs/\7y
[global]LUPA开源社区(jL K'h/{]
        workgroup = CJJMLUPA开源社区m w eOW~i
        idmap gid = 10000-20000
qxYP `v@|w0        idmap uid = 10000-20000LUPA开源社区-B~(P/u'B1W7`[
        password server = 192.168.0.7
'M,^m2ZY+e$V%]0        security = adsLUPA开源社区R |2b6n s*\
        realm = EXAMPLE.COMLUPA开源社区X-^%v(K1}?7l!B
        winbind enum users = yes
!R!wty({)[%KU(F Tm0        winbind enum groups = yesLUPA开源社区|$HJ8t,c5J0y;q
        socket ōptions = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
(Ysg)K3Y.d0        log file = /var/log/samba/%m.logLUPA开源社区.PjMy-v}&{
        winbind separator = +LUPA开源社区0W V\n2c)Ep2^5gd
        winbind use default domain = yes
H T\EX ]0        os level = 33LUPA开源社区9Y Y7J!bR
        interfaces = 127.0.0.1 eth0LUPA开源社区 \ gam$le
        bind interfaces ōnly = trueLUPA开源社区{&p4Np:K `(mPF
        printing = cups
YP H N_t0        printcap name = cups
|8C"U)]#G%?"Ng*K%_0        load printers = yes
? ke(QwVzQU0LUPA开源社区hP$E7v/f i0wyKQ;s
以上可根据自已的实际情况而修改LUPA开源社区'|:yu2Y.~yv
重启samba、winbind，然后将机子加入windows域。LUPA开源社区/E"A H.SmJ'uVF4M'vq
/etc/init.d/smb restart
+l'Ay6yk0f0/etc/init.d/winbind restart (failed) ?????LUPA开源社区q|/p6I!{
winbind 为什么会起动不了？LUPA开源社区 Z.HI&[%Tp,L*xp
答案是应先执行samba重启，然后再将机子加入域，然后才重启winbindLUPA开源社区qR3w u#?m#a3`'To@
 net ads join -U administrator@EXAMPLE.COM
3yxQ$E"m:O'{g0[2008/04/03 08:17:38, 0] libads/kerberos.c:create_local_private_krb5_conf_for_domain(651)
,|S'Y*K.{o9x l0  create_local_private_krb5_conf_for_domain: failed to create directory /var/lib/samba/smb_krb5. Error was 权限不够LUPA开源社区 iI n)A/K-{%d wbj
如果加入域的时候出现这样的错误，估计是selinux的问题，将selinux禁止吧！
!P!C0g3z9OuL0vim /etc/sysconfig/selinux
?~ Z3z0rb/U/q0change to  SELINUX=disabled
!`)}-] i+I(\$iv0再一次执行  net ads join -U administrator@EXAMPLE.COM
^(L0^0A8xt0Using short domain name -- CJJMLUPA开源社区9uk'b.hu&]*H(E
Failed to set servicePrincipalNames. Please ensure that
l6d]$N|-wA/j4K0the DNS domain of this server matches the AD domain,
"`'f/UOIb,_-T0Or rejoin with using Domain Admin credentials.LUPA开源社区9U_`/| N%v:|+LS
Deleted account for 'SQUID1' in realm 'EXAMPLE.COM'
W-\Y3q%ch {9n*Mf0Failed to join domain: Type or value existsLUPA开源社区}a:[*p \"[ b
LUPA开源社区$xs8skg.d!C
又失败？？看到原因了吧，是主机名的问题，怎办？那就改呗！
t~ _a7l~ Gk*T%^n0vim /etc/sysconfig/network
ViT9GH$\,g}D0加入 HOSTNAME=squid1.example.comLUPA开源社区2~%skUBHX&Z
vim /etc/hostsLUPA开源社区,e4FZy'` H~#Mf
192.168.0.248     squid1.example.com squid1LUPA开源社区4H(~-Q&kE;D
好了，重启机子吧！
A"}+_{:U I0重启后再执行 net ads join -U administrator@EXAMPLE.COM
&G hH V\jvb*f0终于OK了，
:_A8N8p,mH9k6V W0administrator@EXAMPLE.COM's password: LUPA开源社区@-C)L8R$n0xz+M
Using short domain name -- CJJM
#g'k&Z$f1];?"f&^k0Joined 'SQUID1' to realm 'EXAMPLE.COM'
8_c sY,g7Z0k0LUPA开源社区0j)Z#B,m&Y c8}4@,@
现在重启samba 、winbind 吧
"IdVY3N)VL2ZS$U%G0etc/init.d/smb restart
g ap U,cUgnx0/etc/init.d/winbind restartLUPA开源社区 n8h*dN:k BEc
OK，全部都正常restart了!
,RzPZ(X0
\g} l.AC0用以下命令测试一下LUPA开源社区\5m8rh-zx
wbinfo -t 测试通信成功与否 checking the trust secret via RPC calls succeeded (返回此信息表示成功了)
6\"tz z,M4sS;V0wbinfo -u 查看域用户LUPA开源社区!L+~#v??
wbinfo -g 查看组用户LUPA开源社区7] U0e']^9Q}"b
getent group 查看在/etc/group 里生成映射域组用户 （看不到？）
/C"w*T@%h0getent passwd 查看在/etc/passwd 里生成映射域用户  （看不到？）
C,QeKIh"[%D0要先配制NSS
'xU+Flw2j+JR0Nss为Name Service Switch，控制帐号的验证。编辑/etc/nsswitch.conf,如下
o3?F8Q` N0vim /etc/nsswitch.conf
YLx,["G.Q7R?"h0passwd:     files winbind
)@0`V8qO uPaB0shadow:     files winbindLUPA开源社区Tu%^w N7\ P
group:      files winbindLUPA开源社区%{ Ec|v4q:K~;@,\

Q7jM.vLd%S3mX0再执行 getent group /getent passwd 就可以看到了！LUPA开源社区5G T{P7vx
LUPA开源社区*Lrz)v"L2y H
通过ntlm验证程序来测试之前所做的配置是否正确LUPA开源社区4b9st i1e5E;M&C
ntlm_auth --username=administratorLUPA开源社区},Gm~'wX1X%V*d B*~%q
返回LUPA开源社区5hFz*Iz9|j
NT_STATUS_OK: Success (0x0)LUPA开源社区 ?x$OxC9A _
说明域账号administrator已经通过了AD的认证
#~xj pI*I ?0
5~b5Y9_%]9X5D0Y0四、现在可以安装最新的squid 了LUPA开源社区J x[+C4v{,e~(pe6K
yum update squid.i386(squid-2.6.STABLE6-5.el5_1.2) LUPA开源社区]&G9b6u-O7q`*x
安装完就开始Squid的配置LUPA开源社区_ Cs0mPt
vim /etc/squid/squid.conf
7M.~ ^.w`U%I N e0#启用squid-2.5-ntlmssp做为ntlm验证模式的辅助协议
%\lNQg*Gq0auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
L7q'i5vE)j0auth_param ntlm children 5LUPA开源社区Sm\F4|6n ?GNJ6v!i
auth_param ntlm keep_alive onLUPA开源社区s S-In}M#i4?;y
#启用squid-2.5-basic做为基本验证模式的辅助协议,切记：下面的BASIC验证模式一定得设置在NTLM模式的下面，不然会有不论是不是域用户，打开浏览器总会不停的弹出验证框要求用户和密码的验证。
$^I.vM9^-^(Y0auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
1k6Aa:Z+a&{0auth_param basic children 5LUPA开源社区Mg9`"Lq'o
auth_param basic realm Squid proxy-caching web serverLUPA开源社区 igI]0l8z
auth_param basic credentialsttl 2 hours
,i^VDb Ng*]0auth_param basic casesensitive off
*G4p)U9D,r/cc#s\0#下面的这句参数是重点，保证了Squid可以针对不同的用户组进行不同的访问控制策略
_"M}o2\/zBl0external_acl_type NT_global_group %LOGIN /usr/lib/squid/wbinfo_group.plLUPA开源社区_Z jmE(z"Y B#\;H
#acl设置exampleLUPA开源社区wl1S0LD$kh8[
acl ac_url dstdomain .gov.cn www.hkex.com.hk myob.com.hk .szceo.com babelfish.altavista.com .gziac.org.cn 59.36.241.82
,H"ne \TI]+I g0acl mmxfile urlpath_regex -i \.mp3$ \.avi$ \.exe$  LUPA开源社区Gx!cJ}Fm3@
#acl sexurl url_regex "/etc/squid/sexurl.txt"
Pdc }P)G$J"s0acl qqdomain dstdomain .qq.com .tecent.comLUPA开源社区}RIU(PhC'Z
acl connetc method CONNECT
(k(o j9yX(u5F0D^0acl it_ip39 src 192.168.0.39/255.255.255.255
M2J6tu{4nlhv0acl it_ip12 src 192.168.0.12/255.255.255.255LUPA开源社区x Iskn(q!g
acl it_ip194 src 192.168.0.194/255.255.255.255LUPA开源社区-s"r#qU3Z-S*D
acl intranet dst 192.168.0.0/255.255.255.0
.oe,[n-GPz*K b)Z0acl joson proxy_auth chenquanyanLUPA开源社区YL0pZn4~6d
acl auth_users proxy_auth REQUIRED LUPA开源社区-Oz p|1Q5GZL
acl proxy_it external NT_global_group it
s$p]0@/[)gY0acl proxy_ac external NT_global_group ac
+?2L6J"^#m/oB0acl skype port 48540 443LUPA开源社区.D D_fV*{6L\l3T

p5\s#Siiu;J'g%[$q0http_access allow intranet allLUPA开源社区!l;z$V'@5Wg8R"H
http_access deny connetc qqdomain
a[vv]"VQ%E!U0http_access allow it_ip12 all
*`S Y"J#Jp(jG)C6C0http_access allow joson allLUPA开源社区.w#~ [+Ux+n
http_access deny mmxfileLUPA开源社区D#G4O'Hs%id3]u
http_access deny sexurl
bk-ya\n&T(b L0http_access allow skype it_ip39  
-t}:{` I0http_access allow it_ip194 allLUPA开源社区E4a-r#aX*h F
#http_access allow auth_users proxy_itLUPA开源社区Xb#rg AVW
http_access deny allLUPA开源社区c,yy"Gri'Vm*L

sDb;p?\*BT0LUPA开源社区hL hS a$y
设置为缓荐服务器
7`I H YM0cache_mem 30 M
$g-w8w%|Y0cache_swap_low 90LUPA开源社区%NH y`\$f}3A(e
cache_swap_high 95
O;hynJ-|^0maximum_object_size 20000 KB #超过这个值则不缓存
kqo7C&v{;[0maximum_object_size_in_memory 4096 KB #装入内存缓存的文件大小,默认值是8K,超过8K的文件都不装入内存,可以在这里设成4M.LUPA开源社区^L*j/c4^1?
cache_dir ufs /tmp1 10000 16 256 #磁盘缓存的类型和目录，大小，一二级目录的设置，这里磁盘缓存大小是10G
)JW+r P{,H6sh ]-T0acl QUERY urlpath_regex cgi-bin .php .cgi .avi .wmv .rm .ram .mpg .mpeg .zip .exe
1CNyB r2V'R'a%wu d0cache deny QUERY #设置不想缓存的目录或者文件类型
&W @:l#vH.S Dc0###相关日志记录,可以设为none成不记录日志####LUPA开源社区v)K#~[+Ve'E
cache_store_log /var/log/squid/store.log
Uz+n?S6?K7M0cache_log /var/log/squid/cache.logLUPA开源社区nqW;eA s n
access_log /var/log/squid/access.log combined
(n H-\Lk)?0LUPA开源社区-[-tz#`O{o f
设置完后执行以下命令来生成缓荐
;B{^`i0/etc/init.d/squid stopLUPA开源社区&CO#p$Y:wvj%Y a#i
squid -z
v7i"k ~lgvc0/etc/init.d/squid startLUPA开源社区:IVzW^

zT9DU_4gJ0一定不能忘记这一点，没有winbind管道的足够的权限，系统是没办法对用户的身份进行验证的。其命令如下：LUPA开源社区T1^B^ _cm3h,N#g
chown  root:squid /var/lib/samba/winbindd_privileged -R
3x NP,^6\ P(xX0chmod 750 /var/lib/samba/winbindd_privileged -RLUPA开源社区!XG7I/~"E"e sAO
LUPA开源社区J+@#TP@W ?+x
重启服务LUPA开源社区2E/Ob2mA`
service smb restartLUPA开源社区Za'c)f2nT*kY@
service winbind restart
C7c(D|k i/V3M7d0service squid restart
e2qy6vH4c+h0
~uDb,pt0五、安装sarg日志记录过滤软件LUPA开源社区$Bi}U`
yum install sarg.i386LUPA开源社区.NU:P:{'b:{/A @/g
安装完就设置sarg
x8J*[4R^P p0去掉前面的#
3I;MW#]r$Q0language English
MS1u+?7W9{w0title "Squid User Access Reports"LUPA开源社区?!Wh,J3S3c,f5y
其它选项自己设置
y_!^sL[0SARG是利用cron按日、周、月自动生成日志分析结果,cron脚本安装时会自动布署到:
8nQK+c` k|U0[root@gw libexec]# ls /etc/cron.daily/sarg
p1G(z;{ Ae8D!lZ0/etc/cron.daily/sarg
!@gyE,]O-NU0[root@gw libexec]# ls /etc/cron.weekly/sargLUPA开源社区q eebWB
/etc/cron.weekly/sarg
H a(L5D(_[0[root@gw libexec]# ls /etc/cron.monthly/sargLUPA开源社区:e9cX&Y3j i
/etc/cron.monthly/sargLUPA开源社区 F r6E YKoA
如果想修改具体的执行时间,可以修改"/etc/crontab"文件.
$W9_'Y!h yiP/a,D{M0如果要想查看现在的日志情况,可以直接运行"sarg"命令.LUPA开源社区hW;@;K+X8z~9r
查看日志：http://127.0.0.1/sarg
']8}J5m%v)m6J3zI0
4g/Q PZ6g0六、安装mrtg流量监控软件LUPA开源社区4hlpi#|$^N
yum install mrtg.i386 net-snmp.i386 net-snmp-utils.i386
xU[Z%rC0net-snmp-devel.i386 net-snmp-perl.i386(结合squid监控用到)
-X"T-@Au [ s0执行:cp /etc/squid/mib.txt /var/www/mrtg/squid/squid.mib
:FKB}z ^n0安装完软件包设置squid接受SNMP监控
er/XqY0a0vim /etc/squid/squid.confLUPA开源社区G(Mm$bi{e U me(X
acl snmppublic snmp_community publicLUPA开源社区 tqX_&vO-a
snmp_port 3401
{oe c:U8W2}*g0snmp_access allow snmppublic allLUPA开源社区Dj)N M o
LUPA开源社区e$WFlR
vim /etc/snmp/snmp.confLUPA开源社区-x5xQ(Y6A
改  access  notConfigGroup ""      any       noauth    exact  systemview none none
~L]VA7c\/v9m$ZV0为  access  notConfigGroup ""      any       noauth    exact  mib2 none noneLUPA开源社区\5i+x)H^$cF

Q tE.W&OS-D)t0去掉“#” LUPA开源社区F^FHp
#view mib2   included  .iso.org.dod.internet.mgmt.mib-2 fc
SU q!P!d0view mib2   included  .iso.org.dod.internet.mgmt.mib-2 fc
:iY4J&O:~+a h0
aj1?%o;MQ0保存&重启SNMP
o'? N$r.e+p Sv7iT0测试一下SNMP是否正常工作LUPA开源社区 M*q.^7V7Hdhsd5E a g
执行
Q H*H{b r0snmpwalk -m /var/www/mrtg/squid/squid.mib -v2c -c public hostname(换成自己的主机名):3401 .1.3.6.1.4.1.3495.1.1
U4zZ RvX@*g0如果返回以下相似的信息表示SNMP正常工作
1j1A*Vm h \0SQUID-MIB::cacheSysVMsize.0 = INTEGER: 104
h&Un(Fvh;W4v"J0SQUID-MIB::cacheSysStorage.0 = INTEGER: 9532LUPA开源社区Y!]9ZWGZ
SQUID-MIB::cacheUptime.0 = Timeticks: (2101) 0:00:21.01LUPA开源社区G(e6w1lp[F'vy

.I,D/d3R!n[0LUPA开源社区U@{Qyx|'m7w3Y
七、设置MRTGLUPA开源社区'y4rwqJd
vim /etc/mrtg/mrtg.cfgLUPA开源社区2fH8c'` uT(T6w
WorkDir: /var/www/mrtg/squidLUPA开源社区lN2^SW0o)~8~
LoadMIBs: /var/www/mrtg/squid/squid.mibLUPA开源社区5[ M9~ V!S)nt
LUPA开源社区H AAQn/P"tc!]
PageFoot[^]: <i>Page managed by <a href="mailto:quanyan.chen@hotmail.com">Joson Chen</a></i>
CFo(s!u*D*{kS*h0Uc0#以下监控对像要改：hostname===>your hostname(改成你自己的主机名),还有把所有"h2"改成"H1"
8S/sw Lgv4I7i;^0
d2bb5\:n7Om%ZG0
)RI*Jvw*xi?0Target[cacheServerRequests]: cacheServerRequests&cacheServerRequests:public@hostname:3401LUPA开源社区8j3{I4wA*`9P/KQ)l
MaxBytes[cacheServerRequests]: 10000000
fpF vNlAi0Title[cacheServerRequests]: Server Requests @ hostname
F#KC6N4d ]'B0Options[cacheServerRequests]: growright, nopercent
"Ec6vuLq0PageTop[cacheServerRequests]: <h2>Server Requests @ hostname</h2>
5Rb%YK$F0YLegend[cacheServerRequests]: requests/sec
3qM Blc2g%t0ShortLegend[cacheServerRequests]: req/sLUPA开源社区-Zw4l0Q2zq
LegendI[cacheServerRequests]: Requests&nbsp;LUPA开源社区)~(VdeV%M Zg
LegendO[cacheServerRequests]:
7Wa5b O)[ e5?"I:A0Legend1[cacheServerRequests]: RequestsLUPA开源社区V"v:[6^?a
Legend2[cacheServerRequests]:
;o ra0D!|u$V0LUPA开源社区mTCKnMvP7E!rWE'j
Target[cacheServerErrors]: cacheServerErrors&cacheServerErrors:public@hostname:3401LUPA开源社区M{}@!})R*L [[p
MaxBytes[cacheServerErrors]: 10000000
zAh_k/_ L:wH0Title[cacheServerErrors]: Server Errors @ hostname
S(j+m0U.va B0Options[cacheServerErrors]: growright, nopercent
%{2A0K0R6|0PageTop[cacheServerErrors]: <h2>Server Errors @ hostname</h2>
1M@X1TH] tq0YLegend[cacheServerErrors]: errors/sec
$z1r&I.l&MY)Fj0ShortLegend[cacheServerErrors]: err/s
5t2F|4p B Z\0LegendI[cacheServerErrors]: Errors&nbsp;
8~$vI1rLU0LegendO[cacheServerErrors]:LUPA开源社区;[&iq(An7x/y
Legend1[cacheServerErrors]: ErrorsLUPA开源社区9|$x X@to2P
Legend2[cacheServerErrors]:LUPA开源社区 \V(S1[?r9M
LUPA开源社区x1`$Q5qs_5c)c S
Target[cacheServerInOutKb]: cacheServerInKb&cacheServerOutKb:public@hostname:3401 * 1024LUPA开源社区 e4GdVyf0S+WP!o
MaxBytes[cacheServerInOutKb]: 1000000000
$`qg:qE#r0Title[cacheServerInOutKb]: Server In/Out Traffic @ hostnameLUPA开源社区&k V[ _ BD
Options[cacheServerInOutKb]: growright, nopercent
eW)p]+QE*iE0PageTop[cacheServerInOutKb]: <H2>Server In/Out Traffic @ hostname</H2>LUPA开源社区#E"_@(@)X
YLegend[cacheServerInOutKb]: Bytes/sec
0l oe*mnto0ShortLegend[cacheServerInOutKb]: Bytes/s
(q,y]'Nt1[0LegendI[cacheServerInOutKb]: Server In&nbsp;LUPA开源社区8Q*uEE.f,J
LegendO[cacheServerInOutKb]: Server Out&nbsp;LUPA开源社区9f GB0lU?B
Legend1[cacheServerInOutKb]: Server InLUPA开源社区i zQ CW'Z
Legend2[cacheServerInOutKb]: Server Out
/b.I)M)qT l3{0
KG:e%kg(ahT0Target[cacheClientHttpRequests]: cacheClientHttpRequests&cacheClientHttpRequests:public@hostname:3401LUPA开源社区~a4E.ZA0N
MaxBytes[cacheClientHttpRequests]: 10000000LUPA开源社区r,qBB8z
Title[cacheClientHttpRequests]: Client Http Requests @ hostname
Pb}1r,hU0Options[cacheClientHttpRequests]: growright, nopercentLUPA开源社区%_)Wy'\3o5b \ Jg,x
PageTop[cacheClientHttpRequests]: <h2>Client Http Requests @ hostname</h2>
D&D1{z uF}0YLegend[cacheClientHttpRequests]: requests/secLUPA开源社区A!C"A+Ca NQ
ShortLegend[cacheClientHttpRequests]: req/sLUPA开源社区[C,Un#P @(dv
LegendI[cacheClientHttpRequests]: Requests&nbsp;LUPA开源社区&X zoH[!u E1u
LegendO[cacheClientHttpRequests]:
?c u1VL0]!X0?-D0Legend1[cacheClientHttpRequests]: Requests
e"Vhl2}n.^0Legend2[cacheClientHttpRequests]:
u f;C:Gz _+ZSA(\0LUPA开源社区 aa EW8pzm
Target[cacheHttpHits]: cacheHttpHits&cacheHttpHits:public@hostname:3401
bH+uu-~Z2s0LEnt y0MaxBytes[cacheHttpHits]: 10000000LUPA开源社区7ZMz#zS
Title[cacheHttpHits]: HTTP Hits @ hostname
#{3lLD)g1th+@0Options[cacheHttpHits]: growright, nopercentLUPA开源社区6u&?$|)Z$Q
PageTop[cacheHttpHits]: <h2>HTTP Hits @ hostname</h2>LUPA开源社区#ia4EB+Xr1l
YLegend[cacheHttpHits]: hits/sec
~ P(C~F5s z0ShortLegend[cacheHttpHits]: hits/s
WC7k8g Y:jk z0LegendI[cacheHttpHits]: Hits&nbsp;LUPA开源社区a @+g5N8w K
LegendO[cacheHttpHits]:
m3OeHK ?#D`+Z0Legend1[cacheHttpHits]: HitsLUPA开源社区1x:u0{UF%FQ
Legend2[cacheHttpHits]:LUPA开源社区.QE6v;dW`n"V
LUPA开源社区0@:g.i+I$lq |!q
Target[cacheHttpErrors]: cacheHttpErrors&cacheHttpErrors:public@hostname:3401LUPA开源社区HCY J XU
MaxBytes[cacheHttpErrors]: 10000000
7vw2~0v\{'lWT b0Title[cacheHttpErrors]: HTTP Errors @ hostname
+\ ~4k2HW1oo;I0Options[cacheHttpErrors]: growright, nopercent
LoPGR2C8f0PageTop[cacheHttpErrors]: <h2>HTTP Errors @ hostname</h2>
,u R b%y,Rj0YLegend[cacheHttpErrors]: errors/secLUPA开源社区_e R{3u${2CB_
ShortLegend[cacheHttpErrors]: err/sLUPA开源社区#CAC,M2_E9T1S
LegendI[cacheHttpErrors]: Errors&nbsp;
8{Q!H1bnw8u;o n,g0LegendO[cacheHttpErrors]:
D'RY~!eq!}W0Legend1[cacheHttpErrors]: Errors
O|(HCqf4j-Xd0Legend2[cacheHttpErrors]:LUPA开源社区@^(^"Cjs
LUPA开源社区2H0E I8R.VQ2wJ
Target[cacheIcpPktsSentRecv]: cacheIcpPktsSent&cacheIcpPktsRecv:public@hostname:3401
c-h p(s,u}t'x0MaxBytes[cacheIcpPktsSentRecv]: 10000000
"g:uf"V$mg*Lr0Title[cacheIcpPktsSentRecv]: ICP Packets Sent/Received
'ERq-wnQnr0Options[cacheIcpPktsSentRecv]: growright, nopercent
0UM;{"}3P(xhH0PageTop[cacheIcpPktsSentRecv]: <h2>ICP Packets Sent/Recieved @ hostname</h2>
c}X"X-j:z'd'H0YLegend[cacheIcpPktsSentRecv]: packets/sec
-NFc sUX0ShortLegend[cacheIcpPktsSentRecv]: pkts/sLUPA开源社区%~\bi}t t(L
LegendI[cacheIcpPktsSentRecv]: Pkts Sent&nbsp;LUPA开源社区CEvrXe
LegendO[cacheIcpPktsSentRecv]: Pkts Received&nbsp;LUPA开源社区xuOg6qw {
Legend1[cacheIcpPktsSentRecv]: Pkts SentLUPA开源社区lu$F3gR.tS}
Legend2[cacheIcpPktsSentRecv]: Pkts Received
d#A9~9}9k,\/q-T1O2\pv0
H0v;H+A4Nv4\:D0Target[cacheIcpKbSentRecv]: cacheIcpKbSent&cacheIcpKbRecv:public@hostname:3401 * 1024
d3y,Fw7F\0yZt0MaxBytes[cacheIcpKbSentRecv]: 1000000000
Q"C|Yp8a"{,vh0Title[cacheIcpKbSentRecv]: ICP Bytes Sent/Received
ld L*f{t a0Options[cacheIcpKbSentRecv]: growright, nopercentLUPA开源社区$uay-iO6lA&tGv
PageTop[cacheIcpKbSentRecv]: <h2>ICP Bytes Sent/Received @ hostname</h2>LUPA开源社区$Ck,k9S1@@
YLegend[cacheIcpKbSentRecv]: Bytes/secLUPA开源社区7uu3VB.akg'@B
ShortLegend[cacheIcpKbSentRecv]: Bytes/s
6d\/z9l }lT&H`0LegendI[cacheIcpKbSentRecv]: Sent&nbsp;LUPA开源社区2M$]]gU\
LegendO[cacheIcpKbSentRecv]: Received&nbsp;LUPA开源社区MY$Zgn"Ma*?
Legend1[cacheIcpKbSentRecv]: Sent
+^ib-cbQ/E%z$P0Legend2[cacheIcpKbSentRecv]: Received
nl0MT9b0LUPA开源社区W RK!D+Fve+|Z7I
Target[cacheHttpInOutKb]: cacheHttpInKb&cacheHttpOutKb:public@hostname:3401 * 1024LUPA开源社区nk:I)Y5R
MaxBytes[cacheHttpInOutKb]: 1000000000LUPA开源社区Yu(l/^TZ/c!jK D9t]
Title[cacheHttpInOutKb]: HTTP In/Out Traffic @ hostname
w%v ? y5kI yzk0f0Options[cacheHttpInOutKb]: growright, nopercent
n-l5J1qa5pt-J8E0PageTop[cacheHttpInOutKb]: <h2>HTTP In/Out Traffic @ hostname</h2>LUPA开源社区q_n+AEo4}
YLegend[cacheHttpInOutKb]: Bytes/second
-v"A{.|@] Y)|'s0ShortLegend[cacheHttpInOutKb]: Bytes/s
ZwT:x?"z#nFL0LegendI[cacheHttpInOutKb]: HTTP In&nbsp;LUPA开源社区,x3}@O:l&t#qR
LegendO[cacheHttpInOutKb]: HTTP Out&nbsp;LUPA开源社区|:|h:BP
Legend1[cacheHttpInOutKb]: HTTP In
*WN m2M;[P%@!u8[lj0Legend2[cacheHttpInOutKb]: HTTP OutLUPA开源社区:I5FiA1t)],c!PkP

{(xH,]7NP@-R S0Target[cacheCurrentSwapSize]: cacheCurrentSwapSize&cacheCurrentSwapSize:public@hostname:3401LUPA开源社区*TGX9VTY f
MaxBytes[cacheCurrentSwapSize]: 1000000000
j@*[G.gt0Title[cacheCurrentSwapSize]: Current Swap Size @ hostname
DY'R)GdA*j0Options[cacheCurrentSwapSize]: gauge, growright, nopercentLUPA开源社区g.x$M\t@s
PageTop[cacheCurrentSwapSize]: <h2>Current Swap Size @ hostname</h2>
a'G0l}x|k[g0YLegend[cacheCurrentSwapSize]: swap sizeLUPA开源社区 s*J7k o;_1la\8}
ShortLegend[cacheCurrentSwapSize]: Bytes
Lq%y$j1T{)ss0LegendI[cacheCurrentSwapSize]: Swap Size&nbsp;
uc5P,osU~H0LegendO[cacheCurrentSwapSize]:
V#i&F/@;[3x0Legend1[cacheCurrentSwapSize]: Swap SizeLUPA开源社区3h"WZ;X(_VHk8v` Y
Legend2[cacheCurrentSwapSize]:LUPA开源社区{N/t(E,Z!Kb1C7r.SC
LUPA开源社区 ucM!JD;hCx
Target[cacheNumObjCount]: cacheNumObjCount&cacheNumObjCount:public@hostname:3401
J2Pj7cN"TNfS?0MaxBytes[cacheNumObjCount]: 10000000
oM3`l1u'dF.YH0Title[cacheNumObjCount]: Num Object Count @ hostname
&j7\0z{%Nj\c#E0Options[cacheNumObjCount]: gauge, growright, nopercentLUPA开源社区+H3~2a*L@ i
PageTop[cacheNumObjCount]: <h2>Num Object Count @ hostname</h2>
&\2jd)x7WFD0YLegend[cacheNumObjCount]: # of objectsLUPA开源社区$y!c&j B.Y-qUg{*c
ShortLegend[cacheNumObjCount]: objects
+F;E%td;Bh?0LegendI[cacheNumObjCount]: Num Objects&nbsp;LUPA开源社区W.F D~Dg$}5M
LegendO[cacheNumObjCount]:
3@U;yt EG#\0Legend1[cacheNumObjCount]: Num ObjectsLUPA开源社区1h|gBg$T
Legend2[cacheNumObjCount]:LUPA开源社区\6i4W2kr

U#^8n\^,e8S t0Target[cacheCpuUsage]: cacheCpuUsage&cacheCpuUsage:public@hostname:3401
c.y:wV6qED(r0MaxBytes[cacheCpuUsage]: 100
\8p;o$a NQ4g)k0AbsMax[cacheCpuUsage]: 100
"rVT3QK(t g\0e0Title[cacheCpuUsage]: CPU Usage @ hostnameLUPA开源社区P2W UWa6TU$Nu8?S
Options[cacheCpuUsage]: absolute, gauge, noinfo, growright, nopercent
CfG ` ~(f1k/Y X0Unscaled[cacheCpuUsage]: dwmy
V%Y&o3I g,AAu1@0PageTop[cacheCpuUsage]: <h2>CPU Usage @ hostname</h2>LUPA开源社区6CI4o_6PXVyy
YLegend[cacheCpuUsage]: usage %LUPA开源社区&I0j%z {8d!L+j7t+GH
ShortLegend[cacheCpuUsage]:%
pdG%Bc_K0LegendI[cacheCpuUsage]: CPU Usage&nbsp;
_w9S,{$N4EQ)Y0LegendO[cacheCpuUsage]:LUPA开源社区G{*Xz,L3JO,q&@f gO
Legend1[cacheCpuUsage]: CPU UsageLUPA开源社区f_jU)?#sBc.q8B
Legend2[cacheCpuUsage]:LUPA开源社区7?(OK#]b,e.^`(g
LUPA开源社区{#W3hy+B:V2PYa
Target[cacheMemUsage]: cacheMemUsage&cacheMemUsage:public@hostname:3401 * 1024
Ay6_2u;{2lpR0MaxBytes[cacheMemUsage]: 2000000000LUPA开源社区p"I F]e
Title[cacheMemUsage]: Memory UsageLUPA开源社区+^@'sd)VWJ3z
Options[cacheMemUsage]: gauge, growright, nopercent
9DZTh,fdU b?$P0PageTop[cacheMemUsage]: <h2>Total memory accounted for @ hostname</h2>LUPA开源社区2w l5l7j w3o+O
YLegend[cacheMemUsage]: Bytes
+B.S u8x:y:iy7{N+gG0ShortLegend[cacheMemUsage]: Bytes
a7~o&B-[0T0LegendI[cacheMemUsage]: Mem Usage&nbsp;
5Ctv$r)}^5Y X0LegendO[cacheMemUsage]:LUPA开源社区5W?%VY8yc
Legend1[cacheMemUsage]: Mem Usage
h#s'V-Kv*t;GAv0Legend2[cacheMemUsage]:LUPA开源社区*~'_*xOtpi
LUPA开源社区%^ H7b Na7kR un
Target[cacheSysPageFaults]: cacheSysPageFaults&cacheSysPageFaults:public@hostname:3401
|(Il|ta5KA0MaxBytes[cacheSysPageFaults]: 10000000LUPA开源社区y1b'b|cHR
Title[cacheSysPageFaults]: Sys Page Faults @ hostname
3s"{/?,|^1q0Options[cacheSysPageFaults]: growright, nopercent
f5b]j4H y8e0PageTop[cacheSysPageFaults]: <h2>Sys Page Faults @ hostname</h2>LUPA开源社区(_1XZ!x \ r&H*rq
YLegend[cacheSysPageFaults]: page faults/sec
jk+e)@7j'U0ShortLegend[cacheSysPageFaults]: PF/s
G/K9Q)E(B V0LegendI[cacheSysPageFaults]: Page Faults&nbsp;
%z W#jEw3hN"y0LegendO[cacheSysPageFaults]:
{#M*ko RQ+pST"s0Legend1[cacheSysPageFaults]: Page FaultsLUPA开源社区C M\!ZW0\$w7t*Q.F
Legend2[cacheSysPageFaults]:LUPA开源社区g-J9HjlrS8H;?S
LUPA开源社区(w5j%R Q I%h-ug
Target[cacheSysVMsize]: cacheSysVMsize&cacheSysVMsize:public@hostname:3401 * 1024LUPA开源社区8Q+fVo)Kc(t&P
MaxBytes[cacheSysVMsize]: 1000000000
1}q e:e z!M {5]0Title[cacheSysVMsize]: Storage Mem Size @ hostname
_!q9U A:Y ]_5]1N0Options[cacheSysVMsize]: gauge, growright, nopercent
1X1w-rF QnK%a"t`g3\!I0PageTop[cacheSysVMsize]: <h2>Storage Mem Size @ hostname</h2>
lJJV;?0YLegend[cacheSysVMsize]: mem size
%f&z ?w'W0ShortLegend[cacheSysVMsize]: BytesLUPA开源社区cy @mx@
LegendI[cacheSysVMsize]: Mem Size&nbsp;LUPA开源社区8rn(y7_2o8N1OX
LegendO[cacheSysVMsize]:LUPA开源社区m)g%k*IPb_
Legend1[cacheSysVMsize]: Mem SizeLUPA开源社区*x+B7s{&TG
Legend2[cacheSysVMsize]:
Aj$whr:U0LUPA开源社区,\vf[fD^x+]#r$P
Target[cacheSysStorage]: cacheSysStorage&cacheSysStorage:public@hostname:3401
;C6j6]*W0v0MaxBytes[cacheSysStorage]: 1000000000LUPA开源社区8gE"Duj"WYJ!v.u
Title[cacheSysStorage]: Storage Swap Size @ hostnameLUPA开源社区d6Y U3A![K4}
Options[cacheSysStorage]: gauge, growright, nopercent
z}0M2s"Ra]G*L Z0PageTop[cacheSysStorage]: <h2>Storage Swap Size @ hostname</h2>
7fr \|PM o0YLegend[cacheSysStorage]: swap size (KB)LUPA开源社区+q)ag!OZ1xi-]*X,QL1B
ShortLegend[cacheSysStorage]: KBytesLUPA开源社区 wG+gf;z6`I4@O
LegendI[cacheSysStorage]: Swap Size&nbsp;
9rH;I5y3b\2`r0LegendO[cacheSysStorage]:LUPA开源社区:mS2_0kOMEPe*f
Legend1[cacheSysStorage]: Swap Size
$G(wV9Vyq0Legend2[cacheSysStorage]:
"k#G#Pcp2}UR8Po0
X`'P,W[@0Target[cacheSysNumReads]: cacheSysNumReads&cacheSysNumReads:public@hostname:3401
w'DVfn]7i;I0MaxBytes[cacheSysNumReads]: 10000000LUPA开源社区0C,IKd7rCT
Title[cacheSysNumReads]: HTTP I/O number of reads @ hostname
b;rf^IAd9d0Options[cacheSysNumReads]: growright, nopercentLUPA开源社区$S8G(V s:lZM{
PageTop[cacheSysNumReads]: <h2>HTTP I/O number of reads @ hostname</h2>
8{\/v~m*H"D!?A:H0YLegend[cacheSysNumReads]: reads/secLUPA开源社区Xw IeQ0c2R U9^
ShortLegend[cacheSysNumReads]: reads/sLUPA开源社区~#@lo,{
LegendI[cacheSysNumReads]: I/O&nbsp;
o+{+w"{#j)w0LegendO[cacheSysNumReads]:LUPA开源社区v"Lx*b2\~N
Legend1[cacheSysNumReads]: I/O
/N O-s8mZ:?0Legend2[cacheSysNumReads]:LUPA开源社区4K6q bt'w s+o

t}6g5n3XB i0Target[cacheCpuTime]: cacheCpuTime&cacheCpuTime:public@hostname:3401
Au[yicS jP2u0MaxBytes[cacheCpuTime]: 1000000000LUPA开源社区 IU{/G|PAF1z
Title[cacheCpuTime]: Cpu Time
\?.m+F3Mn0Options[cacheCpuTime]: gauge, growright, nopercentLUPA开源社区m7TyO;A `:@
PageTop[cacheCpuTime]: <h2>Amount of cpu seconds consumed @ hostname</h2>
D*JqM)X!s#o0YLegend[cacheCpuTime]: cpu secondsLUPA开源社区7t,|7Z$Pm6|cJ
ShortLegend[cacheCpuTime]: cpu secondsLUPA开源社区sX4`w&J;|-d
LegendI[cacheCpuTime]: Mem Time&nbsp;
Cq T,\-U0V0LegendO[cacheCpuTime]:
:G2G%Y X.Y;S\0Legend1[cacheCpuTime]: Mem Time
@t(}uQ7c[0Legend2[cacheCpuTime]:
5w+KPo;{hm0LUPA开源社区b MxY8w
Target[cacheMaxResSize]: cacheMaxResSize&cacheMaxResSize:public@hostname:3401 * 1024LUPA开源社区Qc#^2a [0s%bj,]
MaxBytes[cacheMaxResSize]: 1000000000LUPA开源社区?{Ga:~tB c7Z | P
Title[cacheMaxResSize]: Max Resident Size
Q L4d4zt$`?]0Options[cacheMaxResSize]: gauge, growright, nopercentLUPA开源社区#t&X e)wkQ
PageTop[cacheMaxResSize]: <h2>Maximum Resident Size @ hostname</h2>LUPA开源社区;ZP8W9O ?)_dc
YLegend[cacheMaxResSize]: BytesLUPA开源社区G @P h&{:[*|
ShortLegend[cacheMaxResSize]: BytesLUPA开源社区7U1vS8X0cZ*I @
LegendI[cacheMaxResSize]: Size&nbsp;
w!c:s X4u g#o \0LegendO[cacheMaxResSize]:
+p|)X},a(N0Legend1[cacheMaxResSize]: Size
3Z3Y `8?1j0Legend2[cacheMaxResSize]:LUPA开源社区9].Y~$_3l5in

bT5h8~hH0Target[cacheCurrentLRUExpiration]: cacheCurrentLRUExpiration&cacheCurrentLRUExpiration:public@hostname:3401
B-wh/L#FK%Z9j'Mg&@0MaxBytes[cacheCurrentLRUExpiration]: 1000000000
/uA DC,e u0Title[cacheCurrentLRUExpiration]: LRU Expiration AgeLUPA开源社区a SL(N ]tGd/En
Options[cacheCurrentLRUExpiration]: gauge, growright, nopercentLUPA开源社区1`[t|O$Ad%a
PageTop[cacheCurrentLRUExpiration]: <h2>Storage LRU Expiration Age @ hostname</h2>
7^`$l5gg0YLegend[cacheCurrentLRUExpiration]: expir (days)LUPA开源社区*C.]X2X*p7}&H |W7WVa
ShortLegend[cacheCurrentLRUExpiration]: days
Wr'b@:j \%XgA0LegendI[cacheCurrentLRUExpiration]: Age&nbsp;
y6oS N0Sph0LegendO[cacheCurrentLRUExpiration]:
sqA RS&Ch0Legend1[cacheCurrentLRUExpiration]: AgeLUPA开源社区 BJzlI'N
Legend2[cacheCurrentLRUExpiration]:
o'{w/C;\ uNL7p0F0
4O3_]D m$l~0Target[cacheCurrentUnlinkRequests]: cacheCurrentUnlinkRequests&cacheCurrentUnlinkRequests:public@hostname:3401
M-XQ;xy!B~%f1z0MaxBytes[cacheCurrentUnlinkRequests]: 1000000000LUPA开源社区}gkVI
Title[cacheCurrentUnlinkRequests]: Unlinkd RequestsLUPA开源社区*cx d2n:l6j5Q
Options[cacheCurrentUnlinkRequests]: growright, nopercentLUPA开源社区6x6X`,Z _
PageTop[cacheCurrentUnlinkRequests]: <h2>Requests given to unlinkd @ hostname</h2>LUPA开源社区LVx)S9[x?qQ ar
YLegend[cacheCurrentUnlinkRequests]: requests/secLUPA开源社区A!L3z,VR5smw
ShortLegend[cacheCurrentUnlinkRequests]: reqs/sLUPA开源社区M8V!V6p3nMB
LegendI[cacheCurrentUnlinkRequests]: Unlinkd requests&nbsp;
r }^}^Ys6~0LegendO[cacheCurrentUnlinkRequests]:
XM,zC |] Nzh1~.R0Legend1[cacheCurrentUnlinkRequests]: Unlinkd requests
5x/cU#a}3JF3G3l0Legend2[cacheCurrentUnlinkRequests]:LUPA开源社区 Q(uY)J5DvCh#[]/U

E*nZ7I_0Target[cacheCurrentUnusedFileDescrCount]: cacheCurrentUnusedFileDescrCount&cacheCurrentUnusedFileDescrCount:public@hostname:3401
X'~(H6i&nmN"Ep0MaxBytes[cacheCurrentUnusedFileDescrCount]: 1000000000LUPA开源社区M"I4~F5n c4mh
Title[cacheCurrentUnusedFileDescrCount]: Available File DescrīptorsLUPA开源社区 D ]3r8^_(RR
Options[cacheCurrentUnusedFileDescrCount]: gauge, growright, nopercent
%N$IinY4_4{0PageTop[cacheCurrentUnusedFileDescrCount]: <h2>Available number of file descrīptors @ hostname</h2>
+LV?6SK0YLegend[cacheCurrentUnusedFileDescrCount]: # of FDs
p g/y9T.C(RC0ShortLegend[cacheCurrentUnusedFileDescrCount]: FDs
0]8QT:g%SX*z(aH)h+X0LegendI[cacheCurrentUnusedFileDescrCount]: File Descrīptors&nbsp;
!I(HHR#@0LegendO[cacheCurrentUnusedFileDescrCount]:LUPA开源社区:tLl9|6U B/F
Legend1[cacheCurrentUnusedFileDescrCount]: File DescrīptorsLUPA开源社区N3b!u+MA${J
Legend2[cacheCurrentUnusedFileDescrCount]:LUPA开源社区4_-` iYl~3T?
LUPA开源社区r]/?'b*EGt
Target[cacheCurrentReservedFileDescrCount]: cacheCurrentReservedFileDescrCount&cacheCurrentReservedFileDescrCount:public@hostname:3401LUPA开源社区4_.h CPsx`*C
MaxBytes[cacheCurrentReservedFileDescrCount]: 1000000000
HQ%zM)R%g:w f _0Title[cacheCurrentReservedFileDescrCount]: Reserved File Descrīptors
4L1U&ZMU0n?*w0Options[cacheCurrentReservedFileDescrCount]: gauge, growright, nopercentLUPA开源社区?xo4b+_NY:Gb
PageTop[cacheCurrentReservedFileDescrCount]: <h2>Reserved number of file descrīptors @ hostname</h2>LUPA开源社区pF"y1?DI5i
YLegend[cacheCurrentReservedFileDescrCount]: # of FDs
2F{3?5]HcO0ShortLegend[cacheCurrentReservedFileDescrCount]: FDsLUPA开源社区6Vj \E7yy
LegendI[cacheCurrentReservedFileDescrCount]: File Descrīptors&nbsp;
4A1sUk Q G_0LegendO[cacheCurrentReservedFileDescrCount]:LUPA开源社区 ?b-cB)u9vn
Legend1[cacheCurrentReservedFileDescrCount]: File Descrīptors
v$g'sV'z,KlH9V0Legend2[cacheCurrentReservedFileDescrCount]:LUPA开源社区~r}/]#lWH7q

+z~3PzW*|f+C@7j0Target[cacheClients]: cacheClients&cacheClients:public@hostname:3401LUPA开源社区-v,{Vk5e qMK2m\
MaxBytes[cacheClients]: 1000000000LUPA开源社区 w8j Ohcy
Title[cacheClients]: Number of ClientsLUPA开源社区"k9~l7L8wb7\/T`6O
Options[cacheClients]: gauge, growright, nopercent
;D1c g~1P7qM0PageTop[cacheClients]: <h2>Number of clients accessing cache @ hostname</h2>LUPA开源社区$Y)Mj7y+uv,OB*f
YLegend[cacheClients]: clients/sec
G\*],J6l-T0ShortLegend[cacheClients]: clients/s
GL!ppm ]t0LegendI[cacheClients]: Num Clients&nbsp;LUPA开源社区if0Lh*B{p
LegendO[cacheClients]:
!NH&pv3N0Legend1[cacheClients]: Num Clients
L [$|5cCr0r[0Legend2[cacheClients]:LUPA开源社区BZg^J6y/l)T0~6F N8C

+Y't A$]M$X0Target[cacheHttpAllSvcTime]: cacheHttpAllSvcTime.5&cacheHttpAllSvcTime.60:public@hostname:3401LUPA开源社区'q;^8m^6Q
MaxBytes[cacheHttpAllSvcTime]: 1000000000LUPA开源社区5G0JOri#M6xf.M Y!h
Title[cacheHttpAllSvcTime]: HTTP All Service Time
5eU2O;qh2k{0Options[cacheHttpAllSvcTime]: gauge, growright, nopercentLUPA开源社区B,Ez X&{o s
PageTop[cacheHttpAllSvcTime]: <h2>HTTP all service time @ hostname</h2>
!~#_0H FE0YLegend[cacheHttpAllSvcTime]: svc time (ms)LUPA开源社区I7?k8M/e c*xn
ShortLegend[cacheHttpAllSvcTime]: msLUPA开源社区f3gCS6d d#`
LegendI[cacheHttpAllSvcTime]: Median Svc Time (5min)&nbsp;LUPA开源社区(cL%gK?._]
LegendO[cacheHttpAllSvcTime]: Median Svc Time (60min)&nbsp;LUPA开源社区&V\"l._B,L:F'OV
Legend1[cacheHttpAllSvcTime]: Median Svc Time
GR7]7x:IIU)pC L-K0Legend2[cacheHttpAllSvcTime]: Median Svc Time
D Wdp]e0LUPA开源社区 o f{3Foumn
Target[cacheHttpMissSvcTime]: cacheHttpMissSvcTime.5&cacheHttpMissSvcTime.60:public@hostname:3401
S&d;iQ^ v.lhO0MaxBytes[cacheHttpMissSvcTime]: 1000000000
1~J,Q#R%~"]eK k0Title[cacheHttpMissSvcTime]: HTTP Miss Service TimeLUPA开源社区C9T RSytl%q#g
Options[cacheHttpMissSvcTime]: gauge, growright, nopercent
EqK!C/c)}0PageTop[cacheHttpMissSvcTime]: <h2>HTTP miss service time @ hostname</h2>LUPA开源社区/o&Ic:eg2kS
YLegend[cacheHttpMissSvcTime]: svc time (ms)
tUeRZ'k3hm0ShortLegend[cacheHttpMissSvcTime]: ms
b]A'xfQ#\:j0LegendI[cacheHttpMissSvcTime]: Median Svc Time (5min)&nbsp;
$u&Xrp1F oj0LegendO[cacheHttpMissSvcTime]: Median Svc Time (60min)&nbsp;LUPA开源社区3uo!SV9k!~*rO
Legend1[cacheHttpMissSvcTime]: Median Svc Time
,l"I ~8Hs uDXsf0Legend2[cacheHttpMissSvcTime]: Median Svc Time
&P nFNtr Y0LUPA开源社区l6fP N2\{*cBl/b
Target[cacheHttpNmSvcTime]: cacheHttpNmSvcTime.5&cacheHttpNmSvcTime.60:public@hostname:3401LUPA开源社区tWgu_9q(Z*?
MaxBytes[cacheHttpNmSvcTime]: 1000000000
6VWF9Q,{&]qW0Title[cacheHttpNmSvcTime]: HTTP Near Miss Service TimeLUPA开源社区8O V:u%CJ(]4z
Options[cacheHttpNmSvcTime]: gauge, growright, nopercentLUPA开源社区 }b?AO3_$o
PageTop[cacheHttpNmSvcTime]: <h2>HTTP near miss service time @ hostname</h2>LUPA开源社区j|b9eB,^V
YLegend[cacheHttpNmSvcTime]: svc time (ms)LUPA开源社区:J$Z A&T7Z4my
ShortLegend[cacheHttpNmSvcTime]: ms
.n D+UEG }9I0LegendI[cacheHttpNmSvcTime]: Median Svc Time (5min)&nbsp;LUPA开源社区P&_0M\4UU`
LegendO[cacheHttpNmSvcTime]: Median Svc Time (60min)&nbsp;LUPA开源社区9d9L Cp ~hIQ
Legend1[cacheHttpNmSvcTime]: Median Svc Time
b~X"^5vT(VA0Legend2[cacheHttpNmSvcTime]: Median Svc TimeLUPA开源社区fwj2^1S"T+c8N
LUPA开源社区h1Fb{0Vn/AwI rP
Target[cacheHttpHitSvcTime]: cacheHttpHitSvcTime.5&cacheHttpHitSvcTime.60:public@hostname:3401LUPA开源社区*g?OR2nXpW"e
MaxBytes[cacheHttpHitSvcTime]: 1000000000LUPA开源社区US'C$z V
Title[cacheHttpHitSvcTime]: HTTP Hit Service TimeLUPA开源社区5y;]TO(gm@
Options[cacheHttpHitSvcTime]: gauge, growright, nopercentLUPA开源社区 Z8]4HX l"^Zc}
PageTop[cacheHttpHitSvcTime]: <h2>HTTP hit service time @ hostname</h2>
#u/ppl;e#`z0YLegend[cacheHttpHitSvcTime]: svc time (ms)
8t4y!@M`3Cb bV3nb0ShortLegend[cacheHttpHitSvcTime]: ms
6N$@f%W7_d0LegendI[cacheHttpHitSvcTime]: Median Svc Time (5min)&nbsp;LUPA开源社区J9`;V2Z;r&Fg
LegendO[cacheHttpHitSvcTime]: Median Svc Time (60min)&nbsp;
i,^Yygs2I/t0Legend1[cacheHttpHitSvcTime]: Median Svc TimeLUPA开源社区0|z}sv ^]8Y
Legend2[cacheHttpHitSvcTime]: Median Svc TimeLUPA开源社区C7D'zl6d9e?M

f5@]2v JP0Target[cacheIcpQuerySvcTime]: cacheIcpQuerySvcTime.5&cacheIcpQuerySvcTime.60:public@hostname:3401
w2K h3Wh#i0MaxBytes[cacheIcpQuerySvcTime]: 1000000000
L_8R!y9]iN(J Zx0Title[cacheIcpQuerySvcTime]: ICP Query Service Time
/]F5a*^[ Xu0Options[cacheIcpQuerySvcTime]: gauge, growright, nopercentLUPA开源社区nGHnEl-H-w E f.WUp
PageTop[cacheIcpQuerySvcTime]: <h2>ICP query service time @ hostname</h2>
aL]K3Z N0YLegend[cacheIcpQuerySvcTime]: svc time (ms)LUPA开源社区]WDz6\-e
ShortLegend[cacheIcpQuerySvcTime]: msLUPA开源社区4uC)\`:X1G
LegendI[cacheIcpQuerySvcTime]: Median Svc Time (5min)&nbsp;
'gyG h z,D,H0LegendO[cacheIcpQuerySvcTime]: Median Svc Time (60min)&nbsp;
Y$pFIT0Legend1[cacheIcpQuerySvcTime]: Median Svc Time
(B&PPxobO;GCN2]'n0Legend2[cacheIcpQuerySvcTime]: Median Svc TimeLUPA开源社区v a |^;iP;g,m
LUPA开源社区f ?%C.[ U"YX
Target[cacheIcpReplySvcTime]: cacheIcpReplySvcTime.5&cacheIcpReplySvcTime.60:public@hostname:3401LUPA开源社区y,tvCI%g7o.Lr
MaxBytes[cacheIcpReplySvcTime]: 1000000000LUPA开源社区 b0wO_KJ+F M{ \Q
Title[cacheIcpReplySvcTime]: ICP Reply Service Time
t(p/z,O X:Hq&E0Options[cacheIcpReplySvcTime]: gauge, growright, nopercent
ARfp N*[J4k0PageTop[cacheIcpReplySvcTime]: <h2>ICP reply service time @ hostname</h2>
o6{u/KQ+z;B)P0YLegend[cacheIcpReplySvcTime]: svc time (ms)
Nx/J4bn!Oj0ShortLegend[cacheIcpReplySvcTime]: ms
5A7VR[*E E.o0LegendI[cacheIcpReplySvcTime]: Median Svc Time (5min)&nbsp;LUPA开源社区"M&z(Dzzr/j4moe/g
LegendO[cacheIcpReplySvcTime]: Median Svc Time (60min)&nbsp;
!u+_5} k#\b0Legend1[cacheIcpReplySvcTime]: Median Svc TimeLUPA开源社区f(E5tqYeor5d2J
Legend2[cacheIcpReplySvcTime]: Median Svc Time
B,_qW4d?9j0
K|:W e'C"v/Y0Target[cacheDnsSvcTime]: cacheDnsSvcTime.5&cacheDnsSvcTime.60:public@hostname:3401
v8W h| k0MaxBytes[cacheDnsSvcTime]: 1000000000LUPA开源社区 B+Iz9x}&c
Title[cacheDnsSvcTime]: DNS Service Time
\)d*]/v?yF-T2eBE0Options[cacheDnsSvcTime]: gauge, growright, nopercent
5r4r+[ qpR0PageTop[cacheDnsSvcTime]: <h2>DNS service time @ hostname</h2>
^AYAx|"j;viVc0YLegend[cacheDnsSvcTime]: svc time (ms)
8jK ~2ieF o0ShortLegend[cacheDnsSvcTime]: ms
ocyK1s$u X1p.y3O;]0LegendI[cacheDnsSvcTime]: Median Svc Time (5min)&nbsp;
dT8~ {B1F^l0LegendO[cacheDnsSvcTime]: Median Svc Time (60min)&nbsp;
mu}jE"d4cw?0Legend1[cacheDnsSvcTime]: Median Svc Time
)n^Q Y9s._Mq0Legend2[cacheDnsSvcTime]: Median Svc Time
o$Gt2q5[w{BfI0LUPA开源社区s yS5Ik)X
Target[cacheRequestHitRatio]: cacheRequestHitRatio.5&cacheRequestHitRatio.60:public@hostname:3401
0E/ya6?0N f j/u0MaxBytes[cacheRequestHitRatio]: 100LUPA开源社区6~Qhg}+b(P0?:U
AbsMax[cacheRequestHitRatio]: 100
2s[KpN1P`7@z4bEK0Title[cacheRequestHitRatio]: Request Hit Ratio @ hostnameLUPA开源社区M(S&S*b$a%p U Q F+c
Options[cacheRequestHitRatio]: absolute, gauge, noinfo, growright, nopercent
M~fV Gb~U0Unscaled[cacheRequestHitRatio]: dwmyLUPA开源社区+C$HY6^ ?!^v
PageTop[cacheRequestHitRatio]: <h2>Request Hit Ratio @ hostname</h2>LUPA开源社区?)aq(`O!q q
YLegend[cacheRequestHitRatio]: %
8w/a)d;xp k(v EY1M0ShortLegend[cacheRequestHitRatio]: %
v\ z_ p'^,Z9m]H0LegendI[cacheRequestHitRatio]: Median Hit Ratio (5min)&nbsp;
,Y!_-U_1eHI0LegendO[cacheRequestHitRatio]: Median Hit Ratio (60min)&nbsp;
@6{-k3WVp0Legend1[cacheRequestHitRatio]: Median Hit Ratio
Tz ~TSJ[.SwQ0Legend2[cacheRequestHitRatio]: Median Hit Ratio
;RV9l6I`r0LUPA开源社区6JH4a}8V a8E
Target[cacheRequestByteRatio]: cacheRequestByteRatio.5&cacheRequestByteRatio.60:public@hostname:3401
,F|#^/XM|Vo g6^,{0MaxBytes[cacheRequestByteRatio]: 100LUPA开源社区` Aok voI J7YW*N
AbsMax[cacheRequestByteRatio]: 100
O2J)\sv0_4WH Q0Title[cacheRequestByteRatio]: Byte Hit Ratio @ hostname
j$c N:aA_H wz9a0Options[cacheRequestByteRatio]: absolute, gauge, noinfo, growright, nopercentLUPA开源社区8R*U Ve,i4q)Y
Unscaled[cacheRequestByteRatio]: dwmyLUPA开源社区%[f#C:b8\M
PageTop[cacheRequestByteRatio]: <h2>Byte Hit Ratio @ hostname</h2>
Wik[2e@e0YLegend[cacheRequestByteRatio]: %LUPA开源社区+b2mrI:g ~F5{
ShortLegend[cacheRequestByteRatio]:%
Q }*V2Y~0LegendI[cacheRequestByteRatio]: Median Hit Ratio (5min)&nbsp;LUPA开源社区E{a,c+^6C X.b
LegendO[cacheRequestByteRatio]: Median Hit Ratio (60min)&nbsp;LUPA开源社区)GW x2_3t(f T%N"F#Ll'@U
Legend1[cacheRequestByteRatio]: Median Hit Ratio
L-L!~Q]Z5p0Legend2[cacheRequestByteRatio]: Median Hit Ratio
E\w?oj)yX h0
)Q!q+qS2D+m,K I]'|W0Target[cacheBlockingGetHostByAddr]: cacheBlockingGetHostByAddr&cacheBlockingGetHostByAddr:public@hostname:3401
h*qc`6{:m0MaxBytes[cacheBlockingGetHostByAddr]: 1000000000LUPA开源社区R'g)g _^ROI
Title[cacheBlockingGetHostByAddr]: Blocking gethostbyaddr
/} `s2{HB)m8A0Options[cacheBlockingGetHostByAddr]: growright, nopercentLUPA开源社区Ia1|+P!Z m_3h%G
PageTop[cacheBlockingGetHostByAddr]: <h2>Blocking gethostbyaddr count @ hostname</h2>LUPA开源社区+Kw3J6Ui9O'd%m]*N&Z
YLegend[cacheBlockingGetHostByAddr]: blocks/secLUPA开源社区}qbsG+qf|[
ShortLegend[cacheBlockingGetHostByAddr]: blocks/s
,J2Xi nfR2z)e P k0LegendI[cacheBlockingGetHostByAddr]: Blocking&nbsp;
$KDN7?9n8a5D0LegendO[cacheBlockingGetHostByAddr]:LUPA开源社区"i{3s/J9rQe
Legend1[cacheBlockingGetHostByAddr]: BlockingLUPA开源社区4`-Gm@\1`0w
Legend2[cacheBlockingGetHostByAddr]:LUPA开源社区W.Z1|y9Jc b9ec

1\RK6n!F0以上的监控对像脚本由”http://chrismiles.info/unix/mrtg/“ 提供，非常感谢！大家可以去那下载原脚本，有mrtg-squid.cfg、squid-mib.txt 、index.html.LUPA开源社区jp pFgx&g
LUPA开源社区i7Z g%y3y.l
好了，如果没有去下载原脚本就继续跟我做，以上设置好了就执行
zT7W%Vf"a2G5L2?0env LANG=C mrtg /etc/mrtg/mrtg.cfgLUPA开源社区oZ^UL R^nMz
如果没有错误信息提示就表示通过了，如果有的话就自己解决吧^-^(因为我都不知你的错误是什么！！！)
J$?]*YY#K(?0再执行LUPA开源社区vH(H9c-w'x9t:[*V"O
indexmaker /etc/mrtg/mrtg.cfg > /var/www/mrtg/squid/index.html
8Od j.j3h9^3j {0LUPA开源社区#Y5Y6A8scHed
八、然后设置apache
}(Y)K0{}PA3Q0vim /etc/http/conf.d/mrtg.confLUPA开源社区Mky#y?4LI a
Alias /mrtg /var/www/mrtg/squid/
$]n{M"nd~2n]0
4rP)H_PsZ.f0<Location /mrtg>
`?+Y7T3mw7Q0    Order allow,deny
k:A:Z g|s0    Allow from allLUPA开源社区ft-K7}(W N5m4[)f(V
    #Allow from 127.0.0.1LUPA开源社区3k5] J(?KTBK
    #Allow from ::1
T0D,O\2F;{0    # Allow from .example.comLUPA开源社区HXa.K)k~*l-U
</Location>LUPA开源社区"H-t7a%O|#E#n+v;Gb1V
保存退出&重启httpd
r/W9@k PR0打开浏览器输入http://hostname/mrtg/ 就可以看到监控到squid的情况了！
:K ss\3O,@\-`"Q'v0设置每5分钟采样一次
r:MV\n5^2Zd\0启动 crontab –e 添加计划LUPA开源社区T7i'JG'ZS'T~
*/5 * * * *  env LANG=C /usr/bin/mrtg /etc/mrtg/mrtg.cfgLUPA开源社区#`0V8y#FQ,z0f)`

8P1a M`J7gS0LUPA开源社区1x1t7B-J8Abs2g
九、安装clamavLUPA开源社区$_\v%DpD ]k K
yum install clamav.i386 clamav-db.i386  clamav-devel.i386
c(M$vsa7{ U0安装完后执行 freshclam 升级病毒数据库
&e@.Bl"N3f'Z0#freshclamLUPA开源社区Hv,l;` }1l
然后测试LUPA开源社区F.`-hSi1h)cJ
到 http://www.thepcmanwebsite.com/virus_test.shtmlLUPA开源社区5[(}_ KZ1\&`
下载一个测试病毒放到 /var/spool/squid/ 下LUPA开源社区\T"COI
执行  clamscan -l /var/log/squid/clamavscan.log -r /var/spool/squid/ --move=/var/log/squid/vir/
?i9|)x4O qK-o0以上命令解译LUPA开源社区 oC|$m iN"T
-l /var/log/squid/clamavscan.log : 指定扫毒日志记录位置（要先建立此文件哦）
k$t t.oSO:F;oI0-r /var/spool/squid/ : 指定扫毒的目录位置
;U:B nw&T FX[0--move=/data/virus_scan/infect_files/ : 如果文件受感染，将感染病毒的文件隔离到指定目录（此目录也是要手动建立哦）LUPA开源社区 j)M*q)qnW
加入cron中执行任务LUPA开源社区f:k"L1cUGyi'r.V
0 12 * * *  /usr/bin/freshclam  (每天12点升级）
\7^nw TdK!i p030 12 * * * clamscan -l /var/log/squid/clamavscan.log -r /var/spool/squid/ --move=/var/log/squid/vir/  （每天12：30扫毒）LUPA开源社区R@(G'j6w6}fz
LUPA开源社区[fLt8p(oBwnM
十、安装havp
Qp6r*EKt#~*K7Q0到 http://www.server-side.de/download.htm 下载最新版
~A hz3mUt0tar -zxvf havp-0.87.tar.gzLUPA开源社区6|/l'{G:ry0e"z
cd havp-0.87LUPA开源社区jqvN|D
./configureLUPA开源社区4y#v0S@3N f~
make
P9}Fmh&b2Q6s J0make installLUPA开源社区I&Y Rc^ z1gr:m
装完后设置主配置文件LUPA开源社区ne4Jv2Q6tEz
vim /usr/local/etc/havp/havp.configLUPA开源社区:vx#|}Z[/[
注释掉，前面加“#”
'AI5m8s.FtM z0#REMOVETHISLINE deletemeLUPA开源社区F;e9p I)w#|}
USER clamavLUPA开源社区#W{#Bi^y8n;a
GROUP clamav
}9w`.~t6n/B0SERVERNUMBER 8LUPA开源社区"i%a:r)~AC)C
MAXSERVERS 100
ZH&E3Ja)E0ACCESSLOG /var/log/havp/access.logLUPA开源社区6Sn#q7Z3R-m7A
ERRORLOG /var/log/havp/havp.log
U$G IQ#C1v5C7x7e0LOG_OKS falseLUPA开源社区2\3JH:D"r d&|1V7}8h(V+n4k
FORWARDED_IP trueLUPA开源社区\$O4d zi7t9{C+ROt
PORT 8080
y"f UfQ j.a0BIND_ADDRESS 127.0.0.1
.WZ'G6op,]6B6nv8y0WHITELIST /usr/local/etc/havp/whitelistLUPA开源社区"O$v6z7r$s
SCANIMAGES falseLUPA开源社区r+y,H s7wMP
ENABLECLAMLIB true
}2kb0n:k'QVL/x e0CLAMDBDIR /var/clamav
%kJ-C?4ag%s0保存&退出LUPA开源社区2R9U:^!S| D R],K
执行LUPA开源社区icZOO]8xn
chown clamav.clamav /var/tmp/havp /var/log/havp /var/run/havp
$p!n!y'Xd0chmod 700 /var/tmp/havp /var/log/havp /var/run/havpLUPA开源社区-S"vW1n/]i n%M

#tad^%@w HM0vim /etc/fstab (将TMPDIR所在的分区，这里是/var/tmp/havp，mount时要使用mand参数，这里/var/tmp/havp在根分区中，所以用在根分区中)
%_ w-B0OL6C2K i0/dev/VolGroup00/LogVol00 /                       ext3    mand        1 1
#X{ Va)_fkS,b{0
(g8?moC q0启动 /usr/local/sbin/havp -c /usr/local/etc/havp/havp.config
h,i `:n nT2]0vim /etc/rc.local
yd dE]k;@;\p,D/}0后面加入
i6n{F$P+e}bg0/usr/local/sbin/havp -c /usr/local/etc/havp/havp.config
ecXH:J8c+N0LUPA开源社区!QV!M!E7{ k/^#L
结合squid 进行过滤LUPA开源社区+dY8V:mGJ1b
vim /etc/squid/squid.confLUPA开源社区'PW5u~&F`9W7^-Xz
在 acl all src 0.0.0.0/0.0.0.0  后面加入
u*I+A_{*@P0cache_peer 127.0.0.1 parent 8080 0 no-query no-digest no-netdb-exchange default
)NO!K`,Xv(z0cache_peer_access 127.0.0.1 allow allLUPA开源社区F3^KO!G!C

d9J _!|Q v`4r0#Only http traffic can be scannedLUPA开源社区OuK]/_#x&Y`
acl Scan_HTTP proto HTTP
e{@#~ UW0r}0never_direct allow Scan_HTTP
+j q tN P0保存&重启
,XN(QT4@J(AtdS0重启havpLUPA开源社区:k,U9f%DF&{]
 ps -ax|grep havp|awk '{print $1}'|xargs kill -9
:w({$t$eTib;L0/usr/local/sbin/havp -c /usr/local/etc/havp/havp.config
0| };GW1~E0LUPA开源社区1`Bxd+p@|QeZ
好了，以上所有步骤都完成
k;WN)A&s6Q"K0测试病毒LUPA开源社区+t Gn q gs Z
打开浏览器设置代理LUPA开源社区7d9ZeH$Z2?w
打开 http://www.thepcmanwebsite.com/virus_test.shtml
Qb2Ho$a6DP1U#I0下载一个病毒试试，它如果正常的话会阻止你的下载！LUPA开源社区 pWB#Fx C
LUPA开源社区0sb(R!Oiyy(O!R
十一、现在设置自动派发代理LUPA开源社区-wv9M7k1~8^L3H ^
先建立 /var/www/html/wpad.dat 文件LUPA开源社区:{,q"V2RT @ G9]H9ZI
vim /var/www/html/wpad.datLUPA开源社区G6vn0]B
写入
*rQ%] H#H GS.~0function FindProxyForURL(url, host)
.z Y0j ^d[nT @(Kn0{ LUPA开源社区.r1h%h z,}+AGV0FT
if (isPlainHostName(host))
)Y8['yNn/M%B|M `0return "DIRECT";LUPA开源社区\!j4s5n9_/E
else
7Hgs8^6`0return "PROXY 192.168.0.248:3128";
0w vQ(B:a:u`*q0}
E/x;}^ n0保存&退出，并改权限为所有人可读
L7t\L.L7h |,o"V*P0chmod +r /var/www/html/wpad.dat
{i2ypd{7q0LUPA开源社区$zU4E_zy _,D
第二步。在/etc/httpd/conf/httpd.conf
7\ f-C7iB0Listen 192.168.0.248:80
l{gvi'z1Xn v0ServerAdmin quanyan.chen@hotmail.com
Kyv9N8w~I"l0ServerName squid1.example.com
6Z1kJ3DI0AddType application/x-ns-proxy-autoconfig .datLUPA开源社区 GiX*` d
DocumentRoot /var/www/html
$}T3q?6Q R0AccessFileName .htaccessLUPA开源社区I}H7f-X|J,H
AllowOverride All
$hR+}$`^qV0
8W Sk&C5e"nd]^'R$G}0第三步。在DNS里增加一条记录LUPA开源社区b;UU X'\;FE
WPAD(alias) ----> 192.168.0.248
1AO1n fFl0
十二、以上所有设置基本可以应用于企业了！
(ZDi^hB| D0下面我继续一些特殊的应用LUPA开源社区 ~*fb.Qe u5? AP+|
1、禁止员工上QQ和MSNLUPA开源社区x1o+gcs;a7Pbk
通过禁止QQ服务器和网址，新建立两个文件。LUPA开源社区,U5h3Y c5C6v
vim /etc/squid/denyqq_ip.listLUPA开源社区ntF)?SoO"[1{
121.14.74.128/255.255.255.128LUPA开源社区'sQciacB)E
121.14.75.0/255.255.255.128
G^ j3Sf-|[T&y0121.14.77.104/255.255.255.248LUPA开源社区M7^5W8f9}Ea8u_#X
219.133.38.128/255.255.255.192LUPA开源社区K+L5c#uN+| r
219.133.48.96/255.255.255.224
nW4nU,g0219.133.49.0/255.255.255.0
V ds4Q@[:Bb[W:wF0219.133.51.93/255.255.255.255LUPA开源社区 F5mh(Yl+Gw
219.133.60.0/255.255.255.0LUPA开源社区r'h+XuGY}
219.133.62.0/255.255.255.240
m*}Jo/F,W-W|.m5~0219.133.62.179/255.255.255.255LUPA开源社区k }VMOJ
219.133.63.0/255.255.255.192
*wE_th(w058.251.60.0/255.255.255.192LUPA开源社区Fmg,v.? e `VFm
58.251.62.0/255.255.255.192LUPA开源社区4Ep7tP'X.bM
58.251.63.0/255.255.255.0
"V+_2g(@wL058.60.14.0/255.255.255.0
G9Sn&FghL6c058.60.15.0/255.255.255.128LUPA开源社区(@a7R2yS o)^s
58.61.165.205/255.255.255.255
\3wMnoJ6F_058.61.32.32/255.255.255.240
k)wmo zA O(H\8g$K058.61.33.112/255.255.255.240LUPA开源社区%IP6^|\(lkIh8ly6~
58.61.34.0/255.255.255.192 LUPA开源社区bj'c mRrk

jr6I+gI*O%}0vim /etc/squid/denyqq_web.list
(^S MZ'tS0 sz.tencent.com
8{4I+\J2\s0?2I0sz2.tencent.com
X5}w hS)cp?0j0sz3.tencent.com
] a(yt"[O0sz4.tencent.comLUPA开源社区^q+Z L0E
sz5.tencent.comLUPA开源社区.]'B [7G4r D p
sz6.tencent.comLUPA开源社区w,tON,s
sz7.tencent.comLUPA开源社区wNp?1X?
sz8.tencent.comLUPA开源社区|*LwkQm
sz9.tencent.com
LWg;O Z0tcpconn.tencent.com
K7hlW+Cj;?O1?e:qe0tcpconn2.tencent.comLUPA开源社区jz h,E}a1y
tcpconn3.tencent.comLUPA开源社区*I~^I/]LC
tcpconn4.tencent.com
%CP6V*v~ ^I({Na@cG0tcpconn5.tencent.comLUPA开源社区J$ni4C$])V
tcpconn6.tencent.comLUPA开源社区4xm[4yQ+x$e`
http://http2.tencent.com
R-tI/S0i%Qi['i2p0http://http.tencent.comLUPA开源社区c!n\1IW Eod4H
121.14.74.138LUPA开源社区6J2JyJ5bC
121.14.74.245
4Pv ? PT1v;`0121.14.74.246
fK_r J*|L0`)O:EM0121.14.74.247LUPA开源社区'o"C#Em!J$[(dW Zc
121.14.75.50LUPA开源社区 r1br(h Sp9^jV?/G
121.14.75.51LUPA开源社区0^q$k'KFCN
121.14.75.57LUPA开源社区8@Rjl%Yf0h
121.14.75.58LUPA开源社区&Mr:m D([@ X1S
121.14.75.59
3s6iuQ T:gTT0121.14.75.60LUPA开源社区XP C2zvxeu
121.14.75.61
l/Nt,k5b.uV0121.14.75.62
!Hk` o7c6Z A0121.14.75.63LUPA开源社区0m.]r2q@6NgD4[
121.14.75.64
&f!XP,p\+CO[0121.14.77.105
b4fTa/v!F0121.14.77.106LUPA开源社区\R `7L|a
121.14.77.107
T;|~ v(VC8w,a,]1Y0219.133.38.135LUPA开源社区+wCF!bc,LnY `
219.133.38.136
J:UajAW"x!Q!Pa6o0219.133.38.230LUPA开源社区L~k.a)]fi[}
219.133.40.130
?&X:e.cd"L0219.133.40.138LUPA开源社区}] C(n9R6I
219.133.40.179LUPA开源社区MRR%QaL)I9iZ c
219.133.40.189
$| i GsbI:g0c0219.133.40.37
Y3B J%f,s'T;\&A\kC/F r0219.133.48.101LUPA开源社区 `(_E-}+?'L? b
219.133.48.102LUPA开源社区5P9p'u)[-vQ T6XR(}~|
219.133.48.103LUPA开源社区7m w$Ix8wC4fTeh
219.133.48.104LUPA开源社区`o|%eO8Ue
219.133.48.105LUPA开源社区2YxrU5v7j6U?
219.133.48.106
xzdW9h L0219.133.48.107LUPA开源社区:dKa@4yr9`o
219.133.48.108
re+k](^)m5]X0219.133.48.109
(_*X!H(rf8\k0219.133.48.52
*K+G\ D"[]$v6Ur$E!x0219.133.48.53LUPA开源社区.J"V7i|~
219.133.48.56LUPA开源社区*O)p^9f5P/Ng|z|u
219.133.48.57
JQ F;[-i,Tz0219.133.48.61LUPA开源社区u)C0@/`s3Z
219.133.48.62
[Ce;T{{0219.133.48.70
L$V5z/BJ+f8~cH P0219.133.48.72LUPA开源社区V)t ]qZ S!k
219.133.48.74LUPA开源社区x:@Bo4VmHKClQ
219.133.48.75
ScnRE$DwC1i0219.133.48.87
h(uQfP0219.133.48.88
6V!lRC eXl0219.133.48.90
3Fyq G"HR @0219.133.48.91LUPA开源社区e(}hzj:Ud|f4Q
219.133.48.96LUPA开源社区Y$Q7{S_,s)hJ!S
219.133.48.97LUPA开源社区*cB Q&dJ
219.133.48.98LUPA开源社区n0y k/l8WM
219.133.48.99LUPA开源社区^0pq0?%R]!q
219.133.49.124LUPA开源社区q)AyopF(HjH&I
219.133.49.125LUPA开源社区3c~d lFm
219.133.49.163
|+y)[y/Vs0219.133.49.164
W;o ]!HW$@p0219.133.49.167LUPA开源社区6D}v'CP$PT
219.133.49.168
Y0QI%}ht!^$sW9^0219.133.49.169LUPA开源社区J8w%i!{0{w4H*c']G
219.133.49.170
@s~H6O-_)u6q0219.133.49.171
:@BL-{7h!Q1\F0219.133.49.172
x%iC{mMn&~D.wC6Z0219.133.49.173LUPA开源社区,{'D+@0verb
219.133.49.195
'za7O[;lWzw4Z0219.133.49.196
y^$GokdN0219.133.49.198LUPA开源社区 VQG2FZ,] e;a*M(_
219.133.49.199LUPA开源社区P-q:_ G Hp
219.133.49.200
gy.VS.y}'qwA(O0219.133.49.206
?Ld ZdDg7N0219.133.49.211LUPA开源社区LCvhQ
219.133.49.215
8\et C8QAH%[0219.133.49.216
e*{a#D.D?0219.133.51.93
LU7S!^3J*j_!rD-O6`0219.133.60.148
7o P/r Oa0219.133.60.149
,wO e}R0219.133.60.15LUPA开源社区Rz;mG1j&M
219.133.60.153
r L,i TCJpe0219.133.60.16
X9X(k)HS3E#n/p0219.133.60.172LUPA开源社区-|OD4p!\:O$w$br4L
219.133.60.173
r4_$]-Aso0219.133.60.174LUPA开源社区Q X-y g_ q+c
219.133.60.18LUPA开源社区 ?L/p^L M
219.133.60.19
9S$d/yXK4O0219.133.60.20
;Y S&C|#Jd$]9a/q0219.133.60.206LUPA开源社区l(a6T&Uv*hZpx
219.133.60.21
G1V:IB"Uh%f(|0219.133.60.22
p:?_#h;A-C0219.133.60.23
.PPUDHTz3[0219.133.60.24LUPA开源社区\i-mO mi,Mw!` X gZ
219.133.60.246LUPA开源社区oA)H,E R
219.133.60.25
|-oHA8P+AI0219.133.60.250
F l2hB+o0219.133.60.26
VSlOQ1J+W+y0219.133.60.27
t D2e+rS#x#Y3AD&Q0219.133.60.30
v7xQ{T0219.133.60.32LUPA开源社区6]0y&o6[]"Dhg
219.133.60.33
o*Zv9nA0219.133.60.34LUPA开源社区yo%n.d_
219.133.60.35
(\ k4up-@4zh_`^0219.133.60.36
6Vo2uh@ Z0r0219.133.60.37
p9A9U-FN/YT/_?0219.133.60.38LUPA开源社区.O7u S?o@o
219.133.60.39
mi~-b,A iw g0219.133.60.71LUPA开源社区Q6~a~5X
219.133.60.72
~{ @q lz3~\'X0y e0219.133.60.74LUPA开源社区,] F.u!?9kud8VJ
219.133.60.75
7W.\(KBdiI(F0219.133.62.10
Md N0E$P$g N5k0219.133.62.179LUPA开源社区i!~9Vk[
219.133.62.2LUPA开源社区#D\h!i,_6bsh#e N N
219.133.62.3
8UV5^9DKU0219.133.62.4
V c MU#c6F%N1B0219.133.62.8
.]5l#BtNl8?9j0219.133.62.9
iJN0[ }8p0219.133.63.15
4U6_KKz1E[$\&En0219.133.63.53
$eQ#hwe a D s1i9^K0219.133.63.54
oWNMJ%e2@J058.251.60.44LUPA开源社区w\MW,PHqC
58.251.60.46LUPA开源社区hFmi/v)UY
58.251.60.51LUPA开源社区w^vg7GUM&JE Z
58.251.60.53LUPA开源社区5r+sD.sH
58.251.62.14
U%p!e9F&Siuu hOB058.251.62.15LUPA开源社区 G*P9Ic"x*BDj
58.251.62.17LUPA开源社区 h#p2D6{'Lo/d/V
58.251.62.25
O&^#y:qs/Nd%P;i3Z058.251.62.26LUPA开源社区u Z9k)N9^
58.251.62.31LUPA开源社区:|'s:K*m? oL
58.251.62.35
1vV ^;SOB8K Jq.Q-R058.251.62.37
t4vb9v/a058.251.62.38LUPA开源社区-a6_&_l8S?
58.251.62.40LUPA开源社区n;b7a+bl6{| ex
58.251.63.56
cdG*N;Q Ci058.251.63.57LUPA开源社区 ]?Un R:A0~
58.251.63.58LUPA开源社区 I3p(Y6_1gDb
58.251.63.60LUPA开源社区 P#fsdF `
58.251.63.61LUPA开源社区NbE._ Tr$L
58.251.63.62
Y2rdg#c058.251.63.64
yV P"|b"C058.251.63.65
*g3g9N+R;d9Y#u6u058.251.63.66LUPA开源社区4\#D5{:]r4OBv$E|
58.251.63.68LUPA开源社区c_3y h6d4]f
58.251.63.69
/W V9f#l9N058.251.63.71LUPA开源社区RT?:R1|P i3C-_
58.251.63.72
6z1do(k[#G ^8DD058.251.63.74
9X*_5z6R'bd8P*@058.251.63.75LUPA开源社区6[1O@?VA8`8]#v
58.251.63.76
X:t2iRW4J058.251.63.78LUPA开源社区~o3Nm*o8{.k Hq
58.251.63.79LUPA开源社区Ln7g*aQ&]yO
58.60.14.101LUPA开源社区(C;^G,rM
58.60.14.102
0v"Ixcf9d0{k058.60.14.103LUPA开源社区8J%hK eF5eT
58.60.14.104
g8\j*C^%|058.60.14.106LUPA开源社区 pO/Q3Kw1N}h0U
58.60.14.107LUPA开源社区&H?XLK C3M
58.60.14.108
0c3@Q-| |}haCO058.60.14.109
@EV%^k+gke058.60.14.110
H%Hm2lIl7o]O058.60.14.111LUPA开源社区PC(u,{n
58.60.14.113LUPA开源社区S"{.Ju?X N v
58.60.14.114LUPA开源社区M)_] \;l~"u4@
58.60.14.115LUPA开源社区/m.V'u#n:~^%cy.GK
58.60.14.180LUPA开源社区[0qnU/^,M:Y
58.60.14.191
:ss7\)?5r0_{058.60.14.192LUPA开源社区CN/B2\Y+K E#\ t#G
58.60.14.193LUPA开源社区$N h1HE T"R
58.60.14.194LUPA开源社区vg`,I1t sE"Wy
58.60.14.195
D+e_ _"E*uE058.60.14.199
:|)]^-U{_\E058.60.14.201LUPA开源社区3qeb5|BP'i
58.60.14.202
3j-N,UP#{Ic(L cs058.60.14.33LUPA开源社区 H CHDm%l
58.60.14.32LUPA开源社区bVsmkj yGh dA-N
58.60.14.34
%YTd ]8S Gj0Bv058.60.14.35LUPA开源社区6u/Cd:N&C4nI6u
58.60.14.37LUPA开源社区9tS1Vv!c+K2L"_U
58.60.14.38
"U2_D` }R;p3o058.60.14.39LUPA开源社区 c)e?*|m*b%^
58.60.14.40
n.H1V,z'w;bs{7j0O058.60.14.41
`%TU"TY7{7N:j058.60.14.42
F@b2z2]6dPd058.60.14.43LUPA开源社区E BdJI&O5u;u$q
58.60.14.44
7j-yboL&`c^058.60.14.45LUPA开源社区o e _JN8Nm+T
58.60.14.46LUPA开源社区/Jr2]{|'W
58.60.14.47LUPA开源社区 O~ pcQ:kld6Qt?
58.60.14.48
!n Rn*N-P4X+{058.60.14.49LUPA开源社区;B-F;d+lSc8gw8R
58.60.14.50
QOq.oL3h-EEr058.60.14.51
~)gs)f:r t8s l058.60.14.52LUPA开源社区qZ8oe/]r0^
58.60.14.53
N*gwj V0AN058.60.14.96
:q+o9i U8gR058.60.14.97
@3q|#b#f b058.60.15.104LUPA开源社区*Z3r:qH5}/I
58.60.15.31
E&b6N7^4H[}'E|1B*I/M058.60.15.33
2Q&N$b0X(j kq+X058.60.15.34LUPA开源社区0DDP,y`F HJ0b%S
58.60.15.35LUPA开源社区\t+d}4_ Q$Rg8@)O-i"Z o
58.60.15.36LUPA开源社区$wYB,ey2o!i%JF
58.60.15.38LUPA开源社区j~/c;H:z]r
58.60.15.39LUPA开源社区:K~n^q%c)\
58.60.15.41LUPA开源社区0B/a"m]R5hl ML
58.60.15.96LUPA开源社区 @+qbpK8^0^3V)y5O
58.60.15.97LUPA开源社区xI} pT$h1kU
58.60.15.98LUPA开源社区zJ VA/Fge
58.60.9.66
&I[-V3t"En058.61.165.205LUPA开源社区w AP2Kf%],T
58.61.32.39
g1W,mQQ)N/l4Y zn9t(fiA058.61.32.40LUPA开源社区Fp'd2\UdU
58.61.32.59
+H!^-h{z058.61.33.120LUPA开源社区Sq7aF Y([d6E3t9LG
58.61.33.121
&@,[y1E)rD,Y058.61.33.240LUPA开源社区FA,T&r;@N
58.61.34.20LUPA开源社区 F} i6T!@
58.61.34.21LUPA开源社区}7bsT$E3Jiwt6m
58.61.34.24LUPA开源社区m,E5hun8m6Iw w3l
58.61.34.25LUPA开源社区 f)M0IX&A!h(P
58.61.34.26
L+bX9v]-`lW058.61.34.51LUPA开源社区Y~0d&xq4Z2I
LUPA开源社区 @s{_Tp s,{.t5p`
你还可以用 uedit32 工具去打开QQ里面的config.db,你会看到好多QQ 服务器的IP和域名，把上面没有禁止的IP或域名加入其中。LUPA开源社区ql sv.X%{

F~b~#go!FE0然后编辑/etc/squid/squid.conf
n^5m-KFN&|n$r5K0vim /etc/squid/squid.conf
pQ$pUB)zKt `!~0加入LUPA开源社区6Kb9CLA O-hLj`$~
acl q_web dstdomain "/etc/squid/denyqq_web.list"LUPA开源社区 JmR,d8|5}6?l&u;Yl
acl q_ip dst "/etc/squid/denyqq_ip.list"LUPA开源社区6S&@;I"Y%Le
http_access deny        q_webLUPA开源社区:z)OBYp9O O
http_access deny        q_ipLUPA开源社区:w,o0H TXlqSk

)E HN:Z-R-b4a'f)u0禁止MSNLUPA开源社区{'G&O5fn7D9g
vim /etc/squid/squid.confLUPA开源社区'i(F J%@,D
acl msn-type1 req_mime_type  ^application/x-msn-messenger$
4H9S[a)Hl0acl msn-type2 req_mime_type application/x-msn-messengerLUPA开源社区,B*nS9e7^N4K
acl msnmessenger url_regex -i gateway.dllLUPA开源社区x6}7WF]-ND
acl msn_allow src 192.168.0.212/255.255.255.255
*gc6|.z4X"R8y0http_access deny msn_allow  msn-type1LUPA开源社区6]0o'CW0\A
http_access deny msn-type1
^*uSV"~0http_access deny msnmessenger allLUPA开源社区/S/b:H2k0\$^

l'@7FDzr0ok,你试试可不可再上QQ和MSN ？？？我成功地禁止了上QQ，但MSN好像不行，根据网上所说的MSN方法试过了N个还是不行！随便找了一个以上的让你参考一下！LUPA开源社区d&~yG$v*WdZ

十三、以下说说 squid 越用越慢的问题，我没找到确实的解决方法，只是把了解的一些给说说。LUPA开源社区 E ntU*Hs
1、把一些不相关的记录给禁止掉。
:}3h _"y3O1R0设cache_log none （不建议关掉，因为是cache缓存的错误记录，便于查错）LUPA开源社区:P"af9?)^5J`[{+Bj
设cache_store_log noneLUPA开源社区p;@!MF\ w M
没有必要记录访问日志的话，设cache_access_log noneLUPA开源社区$s/Z1Y{u
即使要记录，也应定期使用squid -k rotate 来轮换日志文件（cron）
O+HcM^02、设置 cache_swap_low xx 和 cache_swap_high yy
1a"^w.og1G0xx 和yy 的值设得近点，cache_swap_high 是开始删除的对像的限，cache_swap_low是停止删除的限，如果相差太大，尽然占据很大的 cache，数字xx和yy是一个百分数，而一个百分点可能是几百兆的空间。
+b3kA qI9b;Z+uW03、cache_dir 计算
juk r?&DO0B0x=Size of cache dir in KB (i.e. 6GB=~6,000,000KB) y=Average object size (just use 13KB) z=Number of directories per first level directory (((x / y) / 256) / 256) * 2 = # of directories
yJL(G{)Z*P0I use 6GB of each of my 13GB drives, so:
p\3k2Xd:Z"i06,000,000 / 13 = 461538.5 / 256 = 1802.9 / 256 = 7 * 2 = 14
W$a/\LK? Au0So my cache_dir line would look like this:LUPA开源社区-jjn WA
cache_dir 6000 14 256
!@(u(P9_3^0{XB0V0LUPA开源社区*q(I^,AC(e1Q `I
好了，以上所有步骤都完成了，这个方案也花掉我一个多星期的时间，总算把它做好了！！！LUPA开源社区 e B#Ty0@wER{

V3lt@(|7n O/r0以上文字可随意转载，但是要保留作者信息。LUPA开源社区+x.\~5o3E
LUPA开源社区&zw\*^ o

f1f+j(aK3|`\0补充反向代理LUPA开源社区$C? _C+{b
http_port 80 vhostLUPA开源社区n3Lb:oz(L7a
cache_peer 192.168.1.50 parent 80 0 no-query originserver weight=1 name=aLUPA开源社区#m'Xy%z3d b"R(Z K
cache_peer_domain a www.serverA1.comLUPA开源社区pS.h`7F7[ hY
＃从客户端过来的请求，如果是 www.serverA1.com，则 Squid 向 ServerA 192.168.1.50 的端口 80发送请求；LUPA开源社区{2le7N `*~
cache_peer_access a allow allLUPA开源社区;V;MN3a:C
＃设置访问权限，允许所有外部客户端访问 a
E gC Z!@0vim /etc/hostsLUPA开源社区N Jr Mdbu
加入 192.168.1.50 www.serverA1.comLUPA开源社区$ht;`2j.a E}
OK,重启SQUID AND NETWORKLUPA开源社区a#zF{[C;LA
LUPA开源社区9T#}R'` z1b2w_

'gu0ys$~5~ g0
4}8?vH:?E Kw^-w0

How to disable automatic proxy caching in Internet Explorer

url:http://kbalertz.com/271361/Disable-Internet-Explorer-Automatic-Proxy-Caching.aspx

Method 1: Modify the registry

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 (http://kbalertz.com/Feedback.aspx?kbNumber=322756/) How to back up and restore the registry in Windows

7lze @1Dx2a1p d0LUPA开源社区T X!M X/bS/B2n
You can disable the Automatic Proxy Result Cache by using the following registry key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
G(@|O9W+[-{8x[V0LUPA开源社区EK/?|Tt#A$M4w
Value: EnableAutoproxyResultCacheLUPA开源社区^)J'hf0H
Type: REG_DWORD
7S?] K7[ W*['p0Data value: 0 = disable caching; 1 (or key not present) = enable automatic proxy caching (this is the default behavīor)
If the registry key is not present, you can create the registry key by using the following registry file:
Windows Registry Editor Version 5.00LUPA开源社区NxKBq\
LUPA开源社区gMJ#p#{/T k+Z&`:v
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings]"EnableAutoProxyResultCache"=dword:00000000"

Method 2: Modify Group Policy settings

1.Click Start, click Run, type gpedit.msc, and then click OK.
2.In Group Policy Object Editor, double-click User Configuration\Administrative Templates\Windows Components\Internet Explorer.
3.Double-click Disable caching of Auto-Proxy scrīpts.
4.Click Disabled, and then click OK.
You may have to use this registry key if you connect by using a proxy server that is handling secure and non-secure requests on the same server. One example of this behavīor is the SQUID Proxy Server software. Because Internet Explorer typically caches port information, it may not send a secure request over the correct port number when it tries to send secure and non-secure responses to the same server, but on different port numbers. For more information about the addition of the bad proxy server list, click the following article number to view the article in the Microsoft Knowledge Base:
320507 (http://kbalertz.com/Feedback.aspx?kbNumber=320507/) Internet Explorer does not retry bad proxy server for 30 minutes

i? Zmm1l0
Oz?e;H'H-yQAK%j+~0wpad setting http://www.craigjconsulting.com/proxypac.htmlLUPA开源社区1xi Y(j']
LUPA开源社区?S&?t9P/_8b
二级代理 LUPA开源社区 J4o r G_rh%}9A#[

http_port 3128 transparentLUPA开源社区 R&Cn%@?5HA(s

cache_peer 192.168.0.33 parent 8080 0 no-query # parent proxyLUPA开源社区;v^_*W T%\:D

acl it_test src 192.168.13.13/32

`8H:[?BY.m+Y0

http_access allow it_testLUPA开源社区t5G5{ Hb GC+K Z

never_direct allow all #all request will be redireted to parent proxy

D0cvby`I._0

LUPA开源社区&x}0JTm3x#@g

指定用户使用LUPA开源社区hw%LU8o rBh,F
iptables -t nat -A PREROUTING -s 192.168.13.21/32 -p tcp --dport 80 -j REDIRECT --to-port 3128LUPA开源社区+j1Hgh}
iptables -t nat -A PREROUTING -s 192.168.13.21/32 -p tcp --dport 21 -j REDIRECT --to-port 3128LUPA开源社区)LC w(i*Bun p
iptables -t nat -A PREROUTING -s 192.168.13.21/32 -p tcp --dport 443 -j REDIRECT --to-port 3128LUPA开源社区.bFTzz G7YGB l.a
iptables -t nat -A POSTROUTING -s 192.168.13.21/32 -d 0.0.0.0/0 -j MASQUERADELUPA开源社区`d:l3xN1lAVBr
LUPA开源社区Wg;Q"B1CVkU*x
dhcp 自动分配代理
(zF.y'Fr+IH@2jqd0

option wpad-url code 252 = text ; LUPA开源社区E0~0\[1c]q5J`}0q

option wpad-url "http://192.168.0.33/wpad.dat" ;LUPA开源社区sn8}O0p%?(F


A)B\'p"Ep0


U$q3tm5O'Cc U6H Q0

*oTSZ)N$D`R0c0

squid 限制宽带

#|*Sau:[0
acl all src 0.0.0.0/0.0.0.0 # might already be defined
!m.Zs$A5mU2o_Z0LUPA开源社区-Cf}Q _(P,a"[
delay_pools 1
Lb sqa e_0delay_class 1 1
:R| R-L,B(`I r0delay_access 1 allow allLUPA开源社区"_;i meB O5~
delay_parameters 1 64000/64000 # 512 kbits == 64 kbytes per secondLUPA开源社区-yRXGg$@5e1~
LUPA开源社区NaY KFY#q
The above example tells that the squid is limited to the bandwidth of 512kLUPA开源社区_Jf2}B\ C

ek.YVhCP ]-}0class类型1为单个IP地址流量LUPA开源社区+zTf KcG'c
class类型2为C类网段中的每个IP地址流量LUPA开源社区A7u/p%Yz
class类型3为B类网段中的每个C类网段中的每个IP地址流量
#NIY7s4Y+osM0
!?*i0QjDGE0所以LUPA开源社区3s k op%nI]
LUPA开源社区D+x#d;k6CT
类型1只有一个总带宽流量实际也就是这个IP地址的流量
$}9T*? Ls0delay_parameters 1 64000/64000
Pq6iImR;o3?0
}4Z2vw7Kv0类型2有两个带宽流量参数，第一个为整个C类型网段流量，第二个为每个IP流量LUPA开源社区7| Jt g Ri
delay_parameters 1 -1/-1 64000/64000LUPA开源社区b'| O/_5ja
LUPA开源社区;N"@.e#e\3yhYF
类型3有三个带宽流量参数,第一个为整个B类网总流量，第二个为每个B类网段中的C类网段总流量,第三个为了B类网段中每个C类网段中的每个IP流量LUPA开源社区U'Ta3t;B$b(y
delay_parameters 1 -1/-1 -1/-1 64000/64000
jB9_ WB|2R ~0LUPA开源社区Q8K1V YOV{P#W(J
注:  -1/-1表示流量无 *** 。 斜杆前后两个参数为最小流量与最大流量.LUPA开源社区V? F!J6pg%lfJ4w
所以看你的情况需要，你只有一个IP地址就用类型1,有一个C类网段就用类型2,有一个B类网段就用类型3.
W Z,G%k0EVR@K0

]!]~&?&[/B0LUPA开源社区2W WpC#vF/\l]
LUPA开源社区2kJ w!}"}

导入论坛 收藏 分享给好友 管理 举报

TAG:

引用 删除 li.hulin   /   2008-04-15 14:07:24
小伙的技术越来越有深度了呀！
 

评分：0

我来说两句

显示全部

:loveliness: :handshake :victory: :funk: :time: :kiss: :call: :hug: